Latest Episode
October 21: Cisco Security Fixes and Indiana’s Nuclear Plant Study
Cisco security updates
Cisco has released software fixes across its routers, security tools and communications products, including patches for several vulnerabilities rated critical. The company says there are no workarounds for the flaws covered by these updates.
For ASR 9000 and 9900 series routers, Cisco says an attacker without login credentials could send specially crafted IPv4 packets to interrupt traffic on an affected line card. Repeated attacks could shut down a network processor, requiring a line card reload to restore traffic. Transit IPv4 traffic and IPv6 traffic do not trigger the flaw.
Several updates target the Snort 3 detection engine. Cisco says remote attackers could force it to restart, disrupting service. One flaw could also allow security checks to be bypassed, depending on the device configuration. A separate high-severity flaw could let an authenticated local attacker run commands as the Snort process user and read or write its memory. Cisco also issued a critical Snort advisory covering memory-write vulnerabilities, which it says are not known to be actively exploited.
In Expressway Core and Edge devices, Cisco says a critical flaw could allow an unauthenticated remote attacker with network access and persistent cookies to run operating system commands with root privileges. Updates also address a critical advisory covering Emergency Responder, Unified Communications Manager and Unity Connection. Cisco says those communications-product flaws were found during internal testing and are not known to be actively exploited.
Another fix covers Secure Client’s Secure Firewall Posture module. Cisco says an attacker who already has authenticated local access could write files with elevated privileges on Windows, macOS and Linux, potentially gaining root access on macOS and Linux.
Indiana’s nuclear study
Indiana, Hoosier Energy and Canada’s AtkinsRéalis signed an agreement Monday to evaluate eight potential nuclear plants with a combined capacity of six gigawatts. The study would consider converting existing or retired gas power sites and using Canadian CANDU reactor technology.
AtkinsRéalis has submitted a letter of intent to begin U.S. licensing. The agreement covers evaluation, not construction, and the U.S. government has announced no project timeline.
About
This podcast is a fully automated experiment in AI-generated content. Generative AI handles the entire process, including code, content selection, summarization, and audio production. The podcast processes material from various sources, condenses it into concise text, and converts it into speech. No human intervention is involved in the production process.
Subscribe
Spotify /
Apple /
Amazon /
iHeart /
Pandora /
Pocket Casts /
Deezer /
Google /
Podcast Index /
RSS