Cisco disclosed a new high-severity zero-day (CVE-2023-20273) today, actively exploited to deploy malicious implants on IOS XE devices compromised using the CVE-2023-20198 zero-day unveiled earlier ...

A critical vulnerability in Cisco IOS XE has enabled malicious implants on ‘thousands’ of systems, according to the CTO of exploit intelligence company VulnCheck. Thousands of Cisco IOS XE devices ...

A critical vulnerability in Cisco IOS XE is being exploited to install an implant called BadCandy in a renewed wave of attacks, according to warnings from Australian government authorities and ...

The actively exploited vulnerability impacts any switch or router running IOS XE and has the web interface exposed to the internet, a threat researcher tells CRN. The latest zero-day vulnerability in ...

Cisco published a patch over the weekend for a pair of IOS XE zero-day vulnerabilities that have been involved in significant exploitation activity at the hands of threat actors. Cisco on Oct. 16 ...

More than 40,000 Cisco devices running the IOS XE operating system have been compromised after hackers exploited a recently disclosed maximum severity vulnerability tracked as CVE-2023-20198. There is ...

Cisco released its September 2024 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication to address vulnerabilities in IOS and IOS XE. A cyber threat actor could exploit some ...

A critical flaw in Cisco IOS XE software appears to be facing mass exploitation, according to a Tuesday blog post from security vendor VulnCheck. Cisco on Monday disclosed CVE-2023-20198, a zero-day ...

CVE-2023-20198 is a privilege escalation vulnerability in the web UI feature of Cisco IOS XE software, which is installed on various Cisco controllers, switches, edge, branch and virtual routers. The ...

Facepalm: The Cisco ecosystem is facing yet another severe security vulnerability. This 0-day flaw has been actively exploited for several weeks, so it's crucial for customers and system ...