From summer camp to grind season
Summary: Cisco Talos' Threat Source newsletter closes out Summer Camp 2025 and notes three vulnerabilities its researchers found and helped fix this year: one in the security chip within Dell laptops' firmware, one in Microsoft Office for macOS permissions, and one in small office/home routers. The newsletter also reports that TransUnion confirmed hackers stole 4.4 million customers' personal information, including names, dates of birth, and Social Security numbers, and that a Russian state-sponsored group called Static Tundra is exploiting an old Cisco IOS vulnerability on unpatched network devices worldwide.
What you should know: The Dell firmware flaw meant a clean Windows reinstall was not always enough to remove an attacker, and the compromised routers let attackers blend in with legitimate ISP traffic - two cases where the usual remediation and detection steps would not have shown the compromise.
Read the original at Cisco Talos ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026