Threat Source newsletter for Aug. 27, 2020
Summary: Cisco Talos researchers discovered four vulnerabilities in Microsoft's Azure Sphere IoT platform, two of which could lead to unsigned code execution and two to privilege escalation, and Microsoft issued a security update to fix them. Talos also published a paper on the infrastructure behind disinformation campaigns ahead of the November election, and separately noted that TinyMCE fixed a high-severity cross-site scripting vulnerability that could have let attackers take over affected websites, with researchers suggesting thousands of sites could be affected.
What's compelling: Two of the Azure Sphere flaws allow unsigned code execution on a platform built specifically to secure IoT devices, so the integrity check that decides whether a device keeps cloud access is the control standing between those flaws and the devices themselves.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026