Threat Source newsletter (Jan. 28, 2021)
Summary: Cisco Talos disclosed multiple vulnerabilities in phpGACL and Micrium uc-HTTP, with patches and Snort rules available for both, and reported that a state-sponsored actor is targeting security researchers worldwide, including multiple Talos researchers who were not compromised. The newsletter also covers ElectroRAT, a trojan spread through three disguised cryptocurrency apps backed by a marketing campaign, and Cisco SD-WAN vulnerabilities that could allow remote code execution, three of which carry a combined severity score of 9.9 out of 10.
Key Takeaway: A state-sponsored actor went after security researchers at Talos itself, and three SD-WAN flaws scoring 9.9 out of 10 sit in the networking layer that connects your sites.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026