Cyber

What changed

A newly identified vulnerability in the email parsing logic of Cisco AsyncOS Software for Cisco Secure Email Gateway has been disclosed. This flaw allows unauthenticated remote attackers to execute arbitrary commands with root privileges on the underlying operating system.

The vulnerability arises from insufficient validation in the email parsing process, enabling attackers to exploit it by sending specially crafted email messages containing malicious SQL statements.

Who is affected

Organizations utilizing Cisco Secure Email Gateway are at risk due to this vulnerability. The impact is particularly significant for those who rely on this software for email security.

The following groups are specifically affected:

• Cisco Secure Email Gateway users
• Organizations using Cisco AsyncOS Software
• IT departments responsible for email security management
• Businesses relying on email communications for critical operations

What to do

Immediate action is recommended to mitigate the risks associated with this vulnerability. Security teams should prioritize the implementation of updates and patches provided by Cisco.

In addition, organizations should review their email security configurations and monitor for any unusual activity that may indicate exploitation attempts.

• Apply security patches from Cisco as soon as they are available.
• Review and enhance email filtering and security measures.
• Monitor system logs for suspicious email activities.
• Educate staff about potential phishing attempts that could exploit this vulnerability.

What changed

Recent assessments have revealed that ConnectWise ScreenConnect is susceptible to both improper privilege management and missing authorization vulnerabilities. These flaws can potentially enable attackers to transfer and execute files within an active remote session without the necessary permissions or host confirmation.

Who is affected

The vulnerabilities in ConnectWise ScreenConnect pose a risk to various stakeholders, including organizations that utilize this remote support tool for managing client systems.

• ConnectWise ScreenConnect users across multiple industries.
• IT service providers leveraging ScreenConnect for remote support.
• Organizations that rely on remote desktop solutions for operational efficiency.

What to do

It is crucial for affected users to assess their current deployment of ConnectWise ScreenConnect and implement necessary security measures. Regular updates and patches should be applied to mitigate these vulnerabilities.

• Review and update ConnectWise ScreenConnect to the latest version.
• Implement strict access controls and monitoring for remote sessions.
• Conduct security training for staff on recognizing and responding to potential unauthorized access.