Latest Episode
Cisco warns of cyberattacks and multiple XSS flaws across email and network tools as ex-Tory Robert Jenrick joins Reform UK and analysis links most train passenger theft arrests to foreign nationals
Cisco Reports Cyberattacks Targeting Secure Email Gateway and Secure Email and Web Manager
Cisco reports a new cyberattack campaign discovered on December 10 targeting a limited number of internet-exposed appliances running Cisco AsyncOS for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. The attackers can execute arbitrary commands with root privileges and have implanted a persistence mechanism to retain control on compromised devices. Cisco has remediated the exploited vulnerability, rated critical (CVE-2025-20393), and released software updates, with no available workarounds, urging customers to assess exposure and apply mitigations promptly.
Stored Cross-Site Scripting Vulnerability in Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure
Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure contain a stored cross-site scripting (XSS) vulnerability in their web-based management interface. An authenticated remote attacker with valid administrative credentials could inject malicious script into certain interface fields due to insufficient input validation, potentially running arbitrary code in a user’s browser session or accessing sensitive browser-based information. Cisco has released software updates to fix the issue; no workarounds are available. Security Impact Rating: Medium. CVE-2026-20075.
Stored Cross-Site Scripting Vulnerability in Cisco Identity Services Engine Management Interface
Cisco Identity Services Engine (ISE) contains a stored cross-site scripting (XSS) flaw in its web-based management interface that could let an authenticated remote attacker with valid administrative credentials inject malicious code into certain pages. If exploited, the attacker could run arbitrary script in the interface context or access sensitive browser-based information. Cisco has released software updates to fix the issue, and no workarounds are available. The security impact is rated Medium (CVE-2026-20076).
Cisco Identity Services Engine Web Interface XSS Vulnerability
Cisco disclosed a medium-severity cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). An authenticated attacker with valid administrative credentials could exploit insufficient input validation to inject malicious code into certain interface pages, potentially running arbitrary scripts in the user’s browser context or accessing sensitive browser-based data. Cisco has released software updates to fix the issue, and no workarounds are available. (CVE-2026-20047)
Robert Jenrick joins Reform UK after being dismissed by the Conservatives
Former minister Robert Jenrick has joined Reform UK after being dismissed by the Conservatives, saying the party "broke Britain". Reform UK leader Nigel Farage welcomed him to the party.
Data analysis finds foreign nationals account for about 80% of arrests for train passenger property theft
Analysis by the Centre for Migration Control, based on Freedom of Information data, says foreign nationals made up 79.3% of British Transport Police arrests for theft of passenger property on Britain’s transport network in 2024–25. The same dataset is cited as showing 9,771 total arrests across the network during the period, with 3,688 involving foreign nationals (37.7%), and foreign nationals comprising 36.6% of sexual offence arrests, 35.7% of violent crime arrests, and 39.6% of drug-related arrests. The figures are used by commentators to argue for tighter immigration controls, and the Home Office was contacted for comment.
About
This podcast is a fully automated experiment in AI-generated content. Generative AI handles the entire process, including code, content selection, summarization, and audio production. The podcast processes material from various sources, condenses it into concise text, and converts it into speech. No human intervention is involved in the production process.
Subscribe
Spotify /
Apple /
Amazon /
iHeart /
Pandora /
Pocket Casts /
Deezer /
Google /
Podcast Index /
RSS