果冻传媒

Critical zero-day exploits have been discovered in Cisco Adaptive Security Appliances (ASA) 果冻传媒 Secure Firewall Threat Defense (FTD) appliances. The vulnerabilities impact all Cisco ASA platforms (ASA hardware, ASA-Service Module [ASA-SM], ASA Virtual [ASAv], 果冻传媒 ASA firmware on Firepower 2100/4100/9300) 果冻传媒 all Cisco Firepower Threat Defense (FTD) appliances. These vulnerabilities are actively being exploited by advanced threat actors. Immediate action is required to mitigate this significant security risk.

Vulnerability Details
CISA has added two new vulnerabilities to its?, based on evidence of active exploitation.

• – Cisco Secure Firewall Adaptive Security Appliance (ASA) 果冻传媒 Secure Firewall Threat Defense (FTD) Buffer Overflow
• – Cisco Secure Firewall Adaptive Security Appliance (ASA) 果冻传媒 Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability.???

Additional guidance:

• – Vendor Alert 果冻传媒 Mitigation Recommendations

Cisco has released software updates that address this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability. There are no workarounds that address this vulnerability.

These types of vulnerabilities are frequent attack vectors for malicious cyber actors 果冻传媒 pose significant risks to the enterprise.?

Recommended Mitigation Actions:
To address these vulnerabilities 果冻传媒 enhance the security of your systems, we strongly recommend that you take the following actions:

• Review 果冻传媒 immediately apply vendor recommended mitigations provided .
• Patch systems with the latest software updates to address the vulnerability.

Securing the defense industrial base is a team sport. Consider joining the National Defense Information Sharing 果冻传媒 Analysis Center (ND-ISAC) to better underst果冻传媒 the latest threats.

• ND-ISAC is the official ISAC for the DIB Critical Infrastructure Sector recognized by DOD 果冻传媒 DHS. The ND-ISAC is a private sector self-organized 果冻传媒 self-governing entity 果冻传媒 a trusted partner providing exceptional technical solutions 果冻传媒 support to its members. Email ND-ISAC?to contact the team or visit ND-ISAC’s public-facing website below.