Threat Source newsletter (April 27, 2023) — New Cisco Secure offerings and extra security from Duo

Summary: Cisco used RSA travel day to announce that all paid Duo customers can now use Trusted Endpoints to block access from unknown devices, and that Duo is reintroducing Essentials, Advantage and Premier editions without raising the per-user price. Cisco also launched its XDR platform, which combines endpoint, network and application telemetry with customized detection, while reporting on the 3CX compromise indicated it was two linked supply chain attacks in which state-sponsored actors first backdoored another application to infiltrate 3CX and also breached several critical infrastructure networks with a backdoor.
Why it matters: The 3CX campaign shows state-sponsored actors chaining one backdoored application into another to reach downstream victims, and the same operation also planted a backdoor in several critical infrastructure networks - so a single trusted software update can be the entry point into more than one environment.

Read the original at Cisco Talos ↗

Topics: Endpoint & Network Security
Mentions: CVE-2023-27350
Related: CVE-2023-27350: Paper Cut MF/NG Improper Access Control Vulnerability Known Exploited Vulnerabilities · Apr 21, 2023
Threat Source newsletter (May 11, 2023) — So much for that ransomware decline Cyber Risks ·
New Vulnerability: Paper Cut MF/NG | Grey Noise Blog Cyber Risks ·