433 Central Ave., 4th Floor, St. Petersburg, FL 33701 | info@poseidon-us.com | Office: (813) 563-2652

Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands and elevate privileges on an affected device.  Note: To exploit these vulnerabilities, the attacker must have valid read-only administrative credentials. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF Security Impact Rating: Critical CVE: CVE-2025-20124,CVE-2025-20125
http://news.poseidon-us.com/THpC2n

Cisco Expressway Series Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-xss-uexUZrEW Security Impact Rating: Medium CVE: CVE-2025-20179
http://news.poseidon-us.com/THpC2m

Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Operator. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-xss-WCk2WcuG Security Impact Rating: Medium CVE: CVE-2025-20180
http://news.poseidon-us.com/THpC2l

SafeBreach exposure validation platform identifies security gaps

SafeBreach launched SafeBreach exposure validation platform, which combines the power of its time-tested breach and attack simulation (BAS) product—now called Validate—and its new attack path validation product, Propagate. Together, they provide enterprise security teams with deeper insight into threat exposure and a more comprehensive view of cyber risk. According to the Gartner Hype Cycle Report, “Adversarial exposure validation technologies offer offensive security technologies simulating threat actor tactics, techniques and procedures to validate the existence of … More → The post SafeBreach exposure validation platform identifies security gaps appeared first on Help Net Security.
http://news.poseidon-us.com/THpC29

Satori provides visibility into data store risk levels

Satori announced its new capabilities, enabling security teams to be in control of all customer data across the development lifecycle in a simple, cost-effective, and holistic way. These capabilities automate the daunting tasks of discovering data, risk assessment, providing granular access control, and mitigating security risks quickly across cloud platforms like AWS, Snowflake, Databricks, and MongoDB. A recent report by Gartner found that 75% of organizations are working to consolidate their cloud-native security vendors. Security … More → The post Satori provides visibility into data store risk levels appeared first on Help Net Security.
http://news.poseidon-us.com/THp96M

Air Force keeps EEO programs, separating them from DEIA initiatives

“It’s important that agencies are interpreting the EO that narrowly, because you can’t shut the EEO office. That’s preposterous,” said Michelle Bercovici. The post Air Force keeps EEO programs, separating them from DEIA initiatives first appeared on Federal News Network.
http://news.poseidon-us.com/THp8F1

The convergence of space and cyber: An evolving threat landscape

Explore the critical role of cyberattacks in shaping the modern space race. Learn how nation-states and organizations must adapt their cybersecurity measures to protect global economies, military operations, and the future of space exploration.
http://news.poseidon-us.com/THp6fB

2025 Dell Technologies Partner Program: Driving Collaboration and Growth

2025 Dell Technologies Partner Program enhances collaboration, streamlines processes and promotes partner growth.
http://news.poseidon-us.com/THp3v8

Air Force keeps EEO programs, separating them from DEIA initiatives

“It’s important that agencies are interpreting the EO that narrowly, because you can’t shut the EEO office. That’s preposterous,” said Michelle Bercovici. The post Air Force keeps EEO programs, separating them from DEIA initiatives first appeared on Federal News Network.
http://news.poseidon-us.com/THp0g4

Union lawsuit seeks to block ‘deferred resignation’ program

OPM’s controversial workforce reduction program violates the Administrative Procedure Act and the Anti-deficiency Act, unions claim. The post Union lawsuit seeks to block ‘deferred resignation’ program first appeared on Federal News Network.
http://news.poseidon-us.com/THp0Nq