Cisco Warns Webex Customers Of Critical SSO Problem

Cisco Warns Webex Customers Of Critical SSO Problem

WebEx SSO Vulnerability, booking.com Reservation Hijacking Risks, Windows Recall Scrutiny, and AI Vishing-as-a-Service

Host Jim Love reports that Cisco disclosed a critical WebEx vulnerability (CVE-2026-2184) affecting SSO integration with Control Hub; although server-side fixes are applied and no exploitation is seen, SSO customers must update SAML certificate configuration to avoid disruption when the old certificate expires, amid recent Cisco firewall zero-day exploitation (CVE-2026-2131) tied to interlock ransomware. A booking.com breach exposed some customers' reservation data (names, contact and address details, reservation details, and messages) but not payment cards, increasing phishing "reservation hijacking" risk using real itinerary details. Researchers also highlight new concerns with Microsoft's Windows 11 Recall, where data may be intercepted after login via another process, though Microsoft says protections are intended. Finally, an underground $4,000 platform, ATHR, automates phishing/vishing with AI voice agents to steal verification codes and accounts across major services.

Cybersecurity Today would like to thank Meter for their support in bringing you this podcast. Meter delivers a complete networking stack, wired, wireless and cellular in one integrated solution that's built for performance and scale. You can find them at Meter.com/cst

00:00 Top Security Headlines
00:32 Sponsor Message
00:50 WebEx Critical Flaw
02:36 Booking.com Breach Scams
05:20 Windows Recall Weaknesses
08:36 AI Voice Phishing Service
11:24 Wrap Up and Thanks

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(100)

ShareFile explained, healthcare in critical cyber condition and click fix tops malware charts

ShareFile explained, healthcare in critical cyber condition and click fix tops malware charts

ShareFile emergency explained, a year of Salesforce breaches examined, healthcare cybersecurity in critical condition and click fix goes number one for malware.  David Shipley covers Progress Software...

15 Juli 13min

ShareFile shutdown, double-agent ransomware negotiator sentenced, Helix uses vishing

ShareFile shutdown, double-agent ransomware negotiator sentenced, Helix uses vishing

ShareFile shutdown order, a double-agent ransomware negotiator sentenced, and vishing crews raid SharePoint   Progress Software ordered customers running ShareFile Storage Zone Controllers to shut dow...

13 Juli 10min

AI Export Controls, FortiBleed, Third-Party Breaches & CISO Burnout | Cybersecurity Today Panel

AI Export Controls, FortiBleed, Third-Party Breaches & CISO Burnout | Cybersecurity Today Panel

Can governments decide who gets access to advanced AI models? Are third-party breaches becoming impossible to control? And why are so many CISOs reaching burnout? In this special Cybersecurity Today M...

11 Juli 1h 1min

A questionable breach, bad routers at home and at work and AI gives defenders a win

A questionable breach, bad routers at home and at work and AI gives defenders a win

This episode covers a hacker's claim of stealing 35GB from Accenture—including source code, Azure personal access tokens, RSA keys, and SSH keys—while Accenture calls it an isolated, remediated matter...

10 Juli 12min

Scattered Spider squashed, Rogue Agent AI flaw, 16 year-old Linux bug and new phish hunts marketers

Scattered Spider squashed, Rogue Agent AI flaw, 16 year-old Linux bug and new phish hunts marketers

Cybersecurity Today host David Shipley covers how a newly unsealed U.S. complaint tied an alleged Scattered Spider member to a luxury retailer intrusion using a persistent Windows device ID, with pros...

8 Juli 13min

AI-Run Ransomware, New Oracle Critical Flaw, NetNut busted

AI-Run Ransomware, New Oracle Critical Flaw, NetNut busted

AI-Run Ransomware, New Oracle 9.8 Flaw Exploited, NetNut Proxy Network Busted, and Pegasus Hits EU Spyware Investigator   This episode covers researchers' report of "Jade Puffer," the first ransomware...

6 Juli 14min

Teams battles bots, Bioshocking AI browser guardrails, Fortibleed fuels ransomware

Teams battles bots, Bioshocking AI browser guardrails, Fortibleed fuels ransomware

Teams cracks down on meeting bots, AI guardrails get bypassed, FortiBleed fuels ransomware, and Nissan confirms PeopleSoft breach   Microsoft rolls out a new Teams admin policy, "Manage External Bots ...

3 Juli 10min

US puts $10m bounty on Russian hackers, new phish hunts hotels, Supreme Court reins in geofencing

US puts $10m bounty on Russian hackers, new phish hunts hotels, Supreme Court reins in geofencing

US Puts $10M Bounty on Russian Hackers, Supreme Court Limits Geofence Warrants, New phishing campaign targets hotels, AI Coding Agents Tricked into Malware and Canada's Electronic Spies Go After Ranso...

1 Juli 11min

Populärt inom Politik & nyheter

aftonbladet-krim
svenska-fall
p3-krim
tv4-nyheterna-story
aftonbladet-daily
flashback-forever
rss-vad-fan-hande
motiv
de-fyras-gang
rss-krimreportrarna
rss-krimstad
spar
rss-sanning-konsekvens
rss-frandfors-horna
rss-flodet
mannen-utan-spar
rss-aftonbladet-krim
kungligt
politiken
krimmagasinet