Threat Source newsletter (May 9)
Summary: Cisco Talos reported a wave of attacks exploiting CVE-2019-2725, a critical Oracle WebLogic vulnerability disclosed and patched the prior week, with slow patching letting attackers deliver Gandcrab ransomware and XMRig. Talos also disclosed vulnerabilities in SQLite and three Jenkins plugins, and Cisco released a security update covering 41 bugs, including a critical SSH key management flaw in Nexus 9000 series ACI mode switch software that could let an attacker connect with root privileges.
Why it matters: CVE-2019-2725 was patched before these attacks spread, yet unpatched WebLogic systems are still being used to push ransomware and cryptominers - and the Nexus 9000 flaw grants root-level SSH access to the switch software itself.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-2725
- Related
- CVE-2019-2725: Oracle Web Logic Server, Injection Known Exploited Vulnerabilities · Jan 10, 2022