Cyber Risks · Cisco Talos

Threat Source newsletter for April 23, 2020

Summary: Cisco Talos released details of a Zoom vulnerability that could let an adversary silently harvest the email addresses of everyone in an organization using Zoom, such as all addresses ending in @cisco.com. The same newsletter notes Cisco patched 17 critical vulnerabilities in its Unified Computing System software, most of them in the UCS REST API, which could allow remote access or denial-of-service.

What's compelling: A flaw that quietly enumerates every Zoom user's email in your organization hands an adversary a ready-made target list, and 17 critical UCS flaws concentrated in a REST API put the data-center layer that builds private clouds in reach of remote exploitation.

Read the original at Cisco Talos ↗

Topics
Malware
Related