Cisco Warns of regreSSHion RCE Impacting Multiple Products

Cisco has issued a security advisory regarding a critical remote code execution (RCE) vulnerability, dubbed “regreSSHion,” that affects multiple products. The vulnerability tracked as CVE-2024-6387, was disclosed by the Qualys Threat Research Unit on July 1, 2024. It impacts the OpenSSH server (sshd) in glibc-based Linux systems and has the potential to allow unauthenticated attackers…

Read More

Cisco Debuts new AI-focused Security System after $28 billion deal to buy Splunk

Cisco on Thursday launched HyperShield, a new security product that uses AI to protect applications, devices, and data across data centers, clouds, and physical locations. The move follows Cisco’s acquisition of Splunk, which the enterprise tech titan bought for $28 billion earlier this year. Jeetu Patel, Cisco’s executive vice president, said HyperShield was designed with…

Read More

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

Cisco has released patches to address a high-severity security flaw impacting its Secure Client software that could be exploited by a threat actor to open a VPN session with that of a targeted user. Cisco described the vulnerability, tracked as CVE-2024-20337 (CVSS score: 8.2), as allowing an unauthenticated, remote attacker to conduct a carriage return…

Read More