Sophos Firewall RCE vulnerability (CVE-2022-3236) exploited the wild
Sophos has fixed a Sophos Firewall remote code execution (RCE) vulnerability (CVE-2022-3236) exploited in the wild.
Network Security
Mirai variant MooBot botnet targets multiple D-Link flaws
Security researchers from Palo Alto Networks Unit 42 have discovered a Mirai botnet variant dubbed “MooBot” that targets multiple D-Link flaws and exposed networking devices running Linux.
Cisco releases Critical advisory for Small Business RV routers
Cisco has released a Critical security update for three vulnerabilities in Small Business RV Routers. Â An unauthenticated, remote attacker could execute arbitrary code or cause a denial of service (DoS) condition on an unpatched device.
Cisco patched 3 Nexus Dashboard Unauthorized Access Vulnerabilities
Cisco has released a Critical severity security advisory for three Nexus Dashboard unauthorized access vulnerabilities.
ZuoRAT targets SOHO devices to launch sophisticated multi-stage cyber attacks
Threat actors are using a multi-stage malware dubbed ZuoRAT to exploit small office/home office (SOHO) routers and launch sophisticated attacks against North American and European networks.
Cisco patches Critical Cisco Expressway Series and Cisco TelePresence Video Communication Server vulnerabilities
Cisco has released a Critical severity security advisory for Cisco Expressway Series and Cisco TelePresence Video Communication Server vulnerabilities (CVE-2022-20812 and CVE-2022-20813).
Attackers could exploit Critical F5 BIG-IP vulnerability to execute arbitrary commands
Unauthenticated attackers could exploit a Critical BIG-IP iControl REST vulnerability CVE-2022-1388 to execute arbitrary system commands, create or delete files, or disable services on BIG-IP systems.
Cisco issues security updates for Spring Framework, Firepower and IOS XR software
Cisco has released a security updates for Spring Framework (“Spring4Shell”), Firepower Management Center (FMC) and IOS XR software that address Critical and High severity vulnerabilities.
Cisco issues Critical security updates for Spring Framework vulnerability
Cisco has issued an updated Critical security advisory for a Spring Framework vulnerability CVE-2022-22965 that affects multiple Cisco products. The networking giant also released a security update for a Critical LAN wireless controller vulnerability.
Juniper patches multiple vulnerabilities in Junos OS and other products (April 2022)
Juniper Networks has released security advisories to fix many vulnerabilities on Junos OS and multiple other products.