Cyber Risks · Cisco Talos

Threat Source newsletter (Feb. 27, 2020)

Summary: Cisco Talos disclosed two high-severity vulnerabilities in Cisco Data Center Network Manager: a privilege escalation flaw that could let an attacker interact with the API at administrator level, and a cross-site request forgery flaw. The newsletter also covers the new Snort Resources page and Snort 101 video series, upcoming Talos talks at Cisco Live Australia and Interop Tokyo 2020, and a German initiative to add a formal IT Security apprenticeship program.

What's compelling: A privilege escalation in Data Center Network Manager lets an attacker reach the API with administrative rights, putting the management plane of the data center in reach; Talos lists Snort SIDs 53171 through 53176 for detection.

Read the original at Cisco Talos ↗

Topics
Malware
Related