Author Archives: Poseidon

Cisco BroadWorks CommPilot Application Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-xss-O696ymRA Security Impact Rating: Medium CVE: CVE-2025-20307
http://news.poseidon-us.com/TNpFWl

Illumio unveils AI Insights Agent to cut alert fatigue and accelerate threat response

Illumio has released Insights Agent, a new capability within Illumio Insights, the company’s AI-driven cloud detection and response (CDR) solution. Agent is an AI-powered, persona-driven guide designed to reduce alert fatigue, accelerate threat detection, and enable containment by delivering real-time, tailored alerts and instant one-click remediation recommendations. This extension of Insights helps security teams stay focused and move quickly to contain threats before they escalate. “Security teams are overwhelmed by noise, and we don’t need … More → The post Illumio unveils AI Insights Agent to cut alert fatigue and accelerate threat response appeared first on Help Net Security.
http://news.poseidon-us.com/TNpB6z

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073)

CVE-2025-33073, a Windows SMB Client vulnerability that Microsoft fixed in June 2025, is being exploited by attackers. The confirmation comes from the Cybersecurity and Infrastructure Security Agency (CISA), which has added the flaw to its Known Exploited Vulnerabilities catalog, presumably based on credible reports. About CVE-2025-33073 CVE-2025-33073 allows for privilege escalation, enabling attackers to gain SYSTEM (highest) privileges on a vulnerable Windows or Windows Server system. “To exploit this vulnerability, an attacker could execute a … More → The post CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073) appeared first on Help Net Security.
http://news.poseidon-us.com/TNpB6w