SSM On-Prem Flaw is a 10/10 disaster.

Published: July 18, 2024, 8:10 p.m.

Cisco has identified a critical security flaw in its SSM On-prem. The world's largest recreational boat and yacht retailer reports a data breach. The UK\u2019s NHS warns of critically low blood stocks after a ransomware attack. Port Shadow enables VPN person in the middle attacks. Ivanti patches several high-severity vulnerabilities. FIN7 is advertising a security evasion tool on underground forums. Indian crypto exchange WazirX sees $230 million in assets suspiciously transferred. Wiz documents vulnerabilities in SAP AI Core. DDoS for hire team faces jail time. Guest Tomislav Pericin, Founder and Chief Software Architect of ReversingLabs, joins us to discuss their "Free Resource to Conduct Risk Assessments on Open-Source Software." Playing red-light green-light with traffic light controllers.\xa0\nMiss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you\u2019ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.\n\nCyberWire Guest\nGuest Tomislav Pericin, Founder and Chief Software Architect of ReversingLabs, joins us to discuss their "Free Resource to Conduct Risk Assessments on Open-Source Software."\xa0\n\nSelected Reading\nCisco discloses a 10.0 CVSS rating vulnerability in SSM On-Prem (Stack Diary)\nYacht giant MarineMax data breach impacts over 123,000 people (Bleeping Computer)\nUK national blood stocks in 'very fragile' state following ransomware attack (The Record)\nPort Shadow Attack Allows VPN Traffic Interception, Redirection (SecurityWeek)\nIvanti Issues Hotfix for High-Severity Endpoint Manager Vulnerability (SecurityWeek)\nCybercrime group FIN7 advertises new EDR bypass tool on hacking forums (Security Affairs)\nWazirX reports security breach at crypto exchange following $230 million 'suspicious transfer' (TechCrunch)\nSAPwned: SAP AI vulnerabilities expose customers\u2019 cloud environments and private AI artifacts (Wiz Blog)\nJail time for operators of DDoS service used to crash thousands of devices (Cybernews)\nHackers could create traffic jams thanks to flaw in traffic light controller, researcher says (TechCrunch)\n\nShare your feedback.\nWe want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.\xa0\n\nWant to hear your company in the show?\nYou too can reach the most influential leaders and operators in the industry. Here\u2019s our media kit. Contact us at cyberwire@n2k.com to request more info.\nThe CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. \xa9 N2K Networks, Inc.\nLearn more about your ad choices. Visit megaphone.fm/adchoices