Cisco and CISA have both raised the alarm over a make-me-root email bug that is being exploited as a 0-day by unknown criminals.
Cisco and the US Cybersecurity and Infrastructure Security Agency (CISA) have both raised the alarm over a vulnerability in Cisco email software that is being exploited as a 0-day by unknown criminals.
The bug is described as a make-me-root flaw, meaning it can allow an attacker to gain the highest level of privileges on an affected system.
Both Cisco and CISA have issued warnings about the active exploitation, though the identity of the attackers remains unknown.
Why this matters: The flaw allows attackers to gain root-level access and is already being exploited in the wild, posing a direct risk to organisations using the affected Cisco email product.
What this means for you: Organisations using the affected Cisco email product should treat the flaw as urgent and follow Cisco and CISA guidance.
Join thousands of readers getting the best of British news straight to their inbox.