Exploit available for critical Cisco ISE bug exploited in attacks

Threat Score:
53
BleepingComputer
7 days ago
Exploit available for critical Cisco ISE bug exploited in attacks

Overview

Exploit available for critical Cisco ISE bug exploited in attacks Bill Toulas July 28, 2025 01:29 PM 0 Security researcher Bobby Gould has published a blog post demonstrating a complete exploit chain for CVE-2025-20281, an unauthenticated remote code execution vulnerability in Cisco Identity Services Engine (ISE). The critical vulnerability wasfirst disclosed on June 25, 2025, with Cisco warning that it impacts ISE and ISE-PIC versions 3.3 and 3.4, allowing unauthenticated, remote attackers to u...

Related Articles

5 articles
1

Ransomware Hits Phone Repair & Insurance Firm, Causing Millions in Damage

GB Hackers • 8 hours ago

Ransomware Hits Phone Repair & Insurance Firm, Causing Millions in Damage Wilhelm Einhaus, a businessman from Bockum-Hövel, Germany, pioneered cell phone insurance services, establishing a robust network that integrated innovative offerings like a 24-hour repair and replacement program. His enterprise expanded rapidly, partnering with major telecommunications providers such as Deutsche Telekom and 1&1, and distributing products through over 5,000 retail outlets nationwide. At its zenith, the com

Score
78
Read more
2

Northwest Radiologists data breach hits 350,000 in Washington

Security Affairs • 14 hours ago

A January 2025 breach at Northwest Radiologists exposed data of 350,000 Washington State residents, the company confirmed. A data breach at Northwest Radiologists in January 2025 has exposed the personal information of 350,000 residents of Washington State, the company has confirmed. The security breach occurred on January 25, 2025 and caused “network disruption” at the […]

Score
77
Read more
3
SonicWall investigates 'cyber incidents,' including ransomware targeting suspected 0-day

SonicWall investigates 'cyber incidents,' including ransomware targeting suspected 0-day

Theregister • 8 hours ago

Cyber-crime SonicWall investigates 'cyber incidents,' including ransomware targeting suspected 0-day Bypassing MFA and deploying ransomware…sounds like something that rhymes with 'schmero-day' SonicWall on Monday confirmed that it's investigating a rash of ransomware activity targeting its firewall devices, following multiple reports of a zero-day bug under active exploit in its VPNs. "SonicWall is actively investigating a recent increase in reported cyber incidents involving a number of Gen 7 f

Score
76
Read more