Threat Source newsletter (July 22, 2021)
Summary: Cisco patched multiple critical vulnerabilities in its Web Security Appliance and Business Process Automation products, both rated 8.8 out of 10 on the CVSS severity scale, that could let an attacker elevate privileges to administrator and access sensitive data or take over a targeted system. CISA and ForgeRock also warned that critical remote code execution vulnerabilities in ForgeRock's Access Management software, which serves as a front end for web apps and remote access setups in enterprise networks, are being actively exploited in the wild, though a patch has been released.
Bottom line: One of these flaws is already being exploited in the wild against a product that sits at the front door of enterprise web apps and remote access, so the window between patch release and attacker use is not theoretical.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2021-1574CVE-2021-1576
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026