CVE 2023-20198 – CISCO’s maximum severity zero-day vulnerabilities <br> <br>Cisco has issued an alert over its critical zero-day vulnerability detected in their IOS XE software range. <br>More details for visit: [a]https%3A%2F%2Fsharkstriker.com%2Fblog%2Fwhat-should-you-know-about-ciscos-high-severity-zero-day-vulnerabilities-cve-2023-20198%2F%0A[/a] <br>The vulnerability is targeted toward systems that have HTTP/HTTP servers turned on. More than 40000 Cisco devices are now affected by this vulnerability, with 10,000 Cisco devices found with an implant for arbitrary code execution. <br> <br>The critical vulnerability CVE-2023-20198 is assigned a severity rating of 10. That is the highest rating given on a CVSS vulnerability severity scale. It is present in the Web UI component of IOS XE software. <br> <br>This vulnerability allows privilege escalation that enables an attacker to gain a full takeover of the system in that he has implanted the malware to. It means that cyber attackers can exploit this vulnerability to hijack a CISCO router and gain control of it. <br> <br>The countries that are impacted the most by this vulnerability include the US, the Philippines, Mexico, Chile, and India. <br> <br>Here are some of the facts about the said critical vulnerability: <br> <br>More than 6509 hosts were affected in the US alone <br>There was a 40% jump in the number of hosts affected within 24 hours of detection <br>Earlier CISCO had issued high-severity vulnerability CVE202344487

A 24/7/365 Security Operations Center (SOC) is crucial for several reasons: <br> <br>Continuous Threat Monitoring: Cyber threats can occur at any time, day or night. Having a SOC that operates around the clock ensures that potential threats are identified and addressed promptly, reducing the risk of a successful attack. <br> <br>Swift Incident Response: In the event of a security incident, time is of the essence. A 24/7 SOC allows for immediate response to breaches, minimizing damage and preventing further compromise. <br> <br>Global Reach and Coverage: Cyberattacks are not confined to specific time zones or regions. Having a SOC that operates continuously ensures that your organization is protected regardless of its geographical location. <br> <br>Real-Time Threat Intelligence: The cybersecurity landscape is constantly evolving. A SOC that operates 24/7 can monitor emerging threats in real-time, enabling organizations to adapt their defenses accordingly. <br> <br>Compliance Requirements: Many industries and regulatory bodies require organizations to have continuous monitoring and incident response capabilities in place. A 24/7 SOC helps maintain compliance with these standards. <br> <br>Reduced Downtime and Business Impact: Cyberattacks can lead to significant downtime, which can be costly for businesses. A 24/7 SOC aims to minimize this downtime by quickly identifying and mitigating threats. <br>More details for visit: [a]https%3A%2F%2Fsharkstriker.com%2Fservices%2Fsoc%2F[/a]

Google’s libwebp based zero-day vulnerability is now reassigned to CVE 2023-5129. It is wildly exploited. Attackers are using webp images to transmit malicious codes to extract sensitive information from their victims. <br>Google released a security fix for a critical vulnerability that affected Google Chrome for Windows, macOS, and Linux. The vulnerability was given the CVE ID as CVE-2023-4863 and has been given a severity of 8.8 (High). <br> <br>On analyzing the vulnerability, it was discovered that a heap buffer overflow vulnerability existed in the libwebp library that a threat actor can exploit to perform out-of-bounds memory write via a crafted HTML page. <br> <br>However, this vulnerability was resubmitted by Google, which is now tracked as CVE-2023-5129. It was later found that CVE-2023-41064 and this vulnerability were similar and affected the same libwebp library. <br> <br>Threat actors exploited this particular library during the BLASTPASS exploit chain attack for deploying the NSO’s Pegasus Spyware. Though both of these vulnerabilities had different CVE IDs and were released by different vendors, they both affect the same library. <br>More details for visit our website: [a]https%3A%2F%2Fsharkstriker.com%2Fblog%2Fcritical-cvis-10-rated-zero-day-webp-vulnerability-wildly-exploited-reassigned-to-cve-2023-5129%2F[/a]