Storm Watch | Cyber News | Word Pad Vulnerability, Digital Ocean, Cisco IOS XE Implants

Summary: On this Storm Watch episode, the hosts describe a Cisco IOS vulnerability that can be triggered to place an implant on a Cisco device, granting the attacker full access. They also cover a WordPad vulnerability that Microsoft says it has updated even as it abandons the product, and a Vulncheck blog post finding devices already compromised via an iOS software vulnerability, including devices at Digital Ocean.
Why it matters: An implant on a Cisco device hands an attacker full access to the device, and the hosts stress that organizations should not allow SMB outbound from their perimeter, since blocking outbound NTLM over SMB would require an application firewall and could generate a large number of help desk tickets.

Read the original at GreyNoise Blog ↗