Sep 13, 2023
2 new incidents, 2 with updates.
Started
- ClosedPatched
Cisco Adaptive Security Appliance and Firepower Threat Defense: Unauthorized Access (CVE-2023-20269)
Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user. Added to CISA KEV on 2023-09-13. CISA lists known use in ransomware campaigns.
Cisco Adaptive Security Appliance and Firepower Threat DefenseClosed Sep 13, 2023
- ClosedPatched
Android Framework: Privilege Escalation (CVE-2023-35674)
Android Framework contains an unspecified vulnerability that allows for privilege escalation. Added to CISA KEV on 2023-09-13.
Android FrameworkClosed Sep 13, 2023
Updated
- ClosedPatched
libwebp heap overflow exploited in the wild (CVE-2023-4863)
A heap overflow in libwebp's lossless decoder, found by Apple SEAR and Citizen Lab after the BLASTPASS iPhone exploit, was exploited in the wild. Because libwebp is everywhere, browsers, Electron apps and image libraries that bundle it all had to ship updates.
libwebp (Google Chrome and everything that bundles libwebp)Closed Sep 13, 2023
- ClosedHighNo fix needed
Retool breach: SMS phishing, deepfaked voice call and synced MFA codes
An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto.
Retool (cloud)Closed Sep 13, 2023
