Daily Brief

Before you book the Nexus upgrade, check which of Cisco’s four critical NX-OS advisories actually apply to your switches

Before you book the Nexus upgrade, check which of Cisco’s four critical NX-OS advisories actually apply to your switches

One batch hits every Nexus config. Three more only matter if NX-API, NGOAM or MPLS OAM is on. Nothing’s exploited…
That LiteLLM box someone spun up for a pilot may be mining crypto for a stranger

That LiteLLM box someone spun up for a pilot may be mining crypto for a stranger

A botnet steered by a poem has taken over more than 3,400 exposed AI and dev servers. Find yours before…
Patch Jira and Confluence today: attackers are now testing the Atlassian bug we flagged yesterday

Patch Jira and Confluence today: attackers are now testing the Atlassian bug we flagged yesterday

A public exploit dropped Tuesday and honeypots lit up two hours later. If Jira talks to Crowd, the endgame is…
Thursday’s brief: FortiGate lockouts, then Nexus switches, hijacked AI servers, Atlassian exploits

Thursday’s brief: FortiGate lockouts, then Nexus switches, hijacked AI servers, Atlassian exploits

Stolen FortiGate logins are turning into lockouts and ransomware. The Atlassian bug from yesterday’s brief now has attackers....
Your Confluence and Jira boxes can leak known files without a login — patch Data Center today

Your Confluence and Jira boxes can leak known files without a login — patch Data Center today

Eight Atlassian Data Center products. No login required. Cloud is already fixed — your servers are not....
If your Java app still uses Struts’ old REST mapper, upgrade before someone tests it

If your Java app still uses Struts’ old REST mapper, upgrade before someone tests it

Legacy RESTful action mapper still on? That configuration turns this OGNL bug into remote code execution....
The PHP template engine under your storefront needs a quiet update

The PHP template engine under your storefront needs a quiet update

Smarty’s cache marker can forge executable PHP. Most teams did not pick Smarty — check the lockfile anyway....
Osaka’s university lost hundreds of servers to ransomware — classes stay cancelled through Thursday

Osaka’s university lost hundreds of servers to ransomware — classes stay cancelled through Thursday

About 500 servers down. Possible exposure for ~130,000 people. Prove your offline restore this week....
Wednesday’s brief: Atlassian Data Center, then Struts, Smarty’s cache, Osaka’s outage

Wednesday’s brief: Atlassian Data Center, then Struts, Smarty’s cache, Osaka’s outage

Wednesday’s CyberExperts Daily Brief — Atlassian Data Center file access, Struts OGNL, Smarty cache injection, Osaka ransomware, plus NetScaler KEV…
Tuesday’s brief: Exchange inboxes, then Rejetto HFS, Dell’s update tool, Denmark’s registry

Tuesday’s brief: Exchange inboxes, then Rejetto HFS, Dell’s update tool, Denmark’s registry

Any logged-in user can read other mailboxes on on-prem Exchange until Friday’s update is in. Also: Rejetto HFS probing, Dell…
One phished login could read any inbox on on-prem Exchange — install the reissued update

One phished login could read any inbox on on-prem Exchange — install the reissued update

Any logged-in user can open other mailboxes on on-prem Exchange until the October 2 update is installed. September’s original update…
Rejetto file servers are being probed — upgrade HFS before the scans turn into break-ins

Rejetto file servers are being probed — upgrade HFS before the scans turn into break-ins

A public exploit forges an HFS admin login with no password. Scanning started October 1. Move to 3.3.4, or take…
Dell’s server update tool needs its own update — move DSU to 2.3.0.0

Dell’s server update tool needs its own update — move DSU to 2.3.0.0

A critical flaw in Dell System Update can give an unauthenticated remote attacker root. Upgrade to 2.3.0.0 and fix the…