InfoSecBulletin Cybersecurity for mankind
Cisco has updated its Identity Services Engine (ISE) to fix two critical security flaws that could let remote attackers execute arbitrary commands and gain elevated privileges on affected devices.
The vulnerabilities are listed below:
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
CVE-2025-20124 (CVSS score: 9.9): A vulnerability in a Cisco ISE API that allows an authenticated attacker to run commands as the root user on a device.
CVE-2025-20125 (CVSS score: 9.1) – An authentication issue in Cisco ISE’s API could allow a remote attacker with read-only access to retrieve sensitive data, modify settings, and restart the system.
An attacker could exploit these flaws by sending a specially crafted Java object or an HTTP request to a specific API endpoint, resulting in privilege escalation and code execution.
Cisco stated that the two vulnerabilities are independent and have no available workarounds. They have been resolved in the following versions:
Cisco ISE software release 3.0 (Migrate to a fixed release)
Cisco ISE software release 3.1 (Fixed in 3.1P10)
Cisco ISE software release 3.2 (Fixed in 3.2P7)
Cisco ISE software release 3.3 (Fixed in 3.3P4)
Cisco ISE software release 3.4 (Not vulnerable)
Deloitte security researchers Dan Marin and Sebastian Radulea discovered and reported the vulnerabilities. The networking equipment company is not aware of any malicious use of the flaws but advises users to keep their systems updated for better protection.
Sophisticated malware attack on Indian Banks; Exposes 50,000 users
