Cisco addresses vulnerability in NX-OS Nexus switch software through patching zero-day issue

Cisco addresses vulnerability in NX-OS Nexus switch software through patching zero-day issue

Cisco has recently patched a medium severity zero-day vulnerability in the command-line interface (CLI) of their Nexus operating system (NX-OS) software. This vulnerability could potentially allow an attacker with valid administrator credentials for the Nexus console to execute arbitrary commands on the Linux operating system with root privileges. In their advisory released on July 1st, … Read more

Despite Patching, Citrix ADC and Gateways Remain Vulnerable to Backdoors

Despite Patching, Citrix ADC and Gateways Remain Vulnerable to Backdoors

Researchers from Fox-IT, part of the NCC Group, have found that adversaries have planted web shells on vulnerable Citrix NetScaler Application Delivery Controllers (ADCs) and Citrix NetScaler Gateways to maintain remote access and execute commands even after the devices have been updated or rebooted. The presence of these web shells allows attackers to modify NetScaler … Read more

SecurityWeek Reports VMware Patching Vulnerabilities from Pwn2Own 2024 Exploits

VMware recently addressed vulnerabilities that were exploited during the Pwn2Own hacking competition in 2024. The company has released patches to address these security flaws, ensuring that its customers’ systems are protected from potential cyber threats. The vulnerabilities were discovered and utilized by ethical hackers during the competition, highlighting the importance of addressing such issues promptly. … Read more

VMware Urges Immediate Patching for Critical Hypervisor Escape Vulnerabilities

VMware Urges Immediate Patching for Critical Hypervisor Escape Vulnerabilities

VMware, a leading innovator in enterprise software, has issued an urgent advisory for customers to patch critical vulnerabilities across its product suite, including ESXi, Workstation, Fusion, and Cloud Foundation. A constellation of four flaws, with two rated at a severe 9.3 out of 10, threatens the core security feature of VMware products, enabling attackers to … Read more