October Roundup of Trending News in Cybersecurity

Read more cybersecurity news in this edition of NetSec News.

• 

  Jessica Owens

  MSSP Training & Development Coordinator, T2 SOC Analyst

Cisco IOS and IOS XE software SNMP denial of service and remote code execution vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. (Cisco)

“Cisco IOS XE runs on the routers and switches that sit in the middle of your network, so a vulnerability in it isn’t just “another patch” — it’s a flaw in the very traffic cop that decides what goes in and out. If an attacker can obtain even low-level SNMP credentials (for example, an SNMPv2c read-only community string), they can force the device into a denial-of-service state, taking down routing or switching functions and disrupting business traffic. More seriously, if the attacker has higher-privileged device credentials in addition to SNMP access, they could craft SNMP packets that lead to code execution as root on the device, giving them complete control over a core piece of network infrastructure. Because the attack targets a protocol that often goes unreviewed once it’s set up. Cisco urges immediately applying the most up to date security patches or applicable workaround to block the vulnerable component. As a temporary measure, restrict SNMP access to trusted management networks only and disable SNMP on devices that don’t actively need it.” –Kenny Buller, CTI Analyst at C3 Integrated Solutions

CISA Flags Adobe AEM Flaw with Perfect 10.0 Score — Already Under Active Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical security flaw impacting Adobe Experience Manager to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2025-54253 (CVSS score: 10.0), a maximum-severity misconfiguration bug that could result in arbitrary code execution. (The Hacker News)

Deloitte to pay money back to Albanese government after using AI in $440,000 report

Deloitte will provide a partial refund to the federal government over a $440,000 report that contained several errors, after admitting it used generative artificial intelligence to help produce it. (The Guardian)

North Korean hackers lure defense engineers with fake jobs to steal drone secrets

Threat actors with ties to North Korea have been attributed to a new wave of attacks targeting European companies active in the defense industry as part of a long-running campaign known as Operation Dream Job. (The Hacker News)

F5 breach exposes BIG-IP source code — nation-state hackers behind massive intrusion

U.S. cybersecurity company F5 on Wednesday disclosed that unidentified threat actors broke into its systems and stole files containing some of BIG-IP’s source code and information related to undisclosed vulnerabilities in the product. (The Hacker News)