50,000 Cisco Firewalls Exposed

Critical Vulnerabilities and AI Voice Cloning Risks in Cybersecurity

In this episode of Cybersecurity Today, host Jim Love discusses key cybersecurity threats, including critical vulnerabilities in Sudo and Cisco firewalls, and a remote command flaw in Western Digital MyCloud devices. The show highlights efforts by national security agencies in the US, Canada, France, Netherlands, and the UK to address these risks, urging immediate patching and system updates. Additionally, the episode covers the emerging threat of real-time AI voice cloning, stressing the need for stricter security measures to prevent social engineering attacks. Listeners are encouraged to implement robust verification processes to secure their organizations and personal communications.

00:00 Critical Sudo Flaw Warning
00:21 Cisco Firewalls Vulnerabilities
02:34 Western Digital MyCloud Devices at Risk
03:48 AI Voice Cloning Threat
05:16 Conclusion and Contact Information

Episode Transcript

(00:00):
50,000 Cisco firewalls remain exposedas advanced attackers exploit new flaws.
CISA warns a critical Sudo flaw.
Lets attackers gain root on Linux.
Western Digital MyCloud devices arehit by a critical remote command flaw.
And realtime AI voice cloningtakes vishing to the next level.

(00:21):
This is cybersecurity today.
I'm your host, Jim Love.
Nearly 50,000 Cisco firewalls remainexposed to the internet through two
serious vulnerabilities, CVE 20 25,23 33, with a CVSS score of 9.9 and
CVE 20 25 23 62, with a CVSS scoreof 6.5 affecting the Cisco a SA and

(00:49):
Firepower threat defense devices.
Shadow server scanning shows thebulk of vulnerable systems are in the
United States, and national securityagencies from the us, Canada, France,
Netherlands, and the UK have issuedurgent warnings, The US cybersecurity and
infrastructure security agency orderedfederal agencies to patch within 24 hours.

(01:13):
Attackers appear to be reusing tacticsused in last year's Arcane Door campaign,
deploying a boot kit called Ray Initiatorfor persistence and a loader dubbed
Line Viper for follow on activity.
Many at risk devices are older, 5500X series firewalls that are at or

(01:36):
near end of life, and agencies areblunt if you can't patch replace.
The US Cybersecurity and Infrastructuresecurity Agency has added a critical
Sudo vulnerability to its known exploitedvulnerabilities list tracked as CVE 20

(01:56):
25 3 2 4 6 3 with a CVSS score of 9.3.
It affects Sudo versions before1.9 0.17 P one, and allows a local
attacker to abuse the chroot.
Handling to executearbitrary commands as root.
even if they're not authorizedin Sudo Researchers disclosed

(02:19):
the bug earlier this year, and itis now being actively exploited.
CISA has given federal agenciesan urgent mitigation window.
Everyone running Linux or UNIX serverswith older Sudo must update to 1.9
0.17 P one, or later immediately.

(02:41):
Western Digital patched acritical remote command injection
vulnerability in many MyCloud models.
CVE 20 25 32 4 7 with a CVSS score of9.8, which can be triggered via the
device web interface with a craftedHTTP post Firmware 5.3 1.108, released

(03:04):
September 23rd fixes the issue forsupported models including PR 2100,
PR 4,100, ex 4,100 ex two Ultra.
Mirror Gen two and others.
Crucially, some models such as theDL 2100 and the DL 4,100 are end of

(03:24):
support and will not receive patches.
these NAS devices oftenrun unattended for years.
When
They reach the end of support theybecome long running liabilities that
attackers can reliably target for datatheft, ransomware or botnet recruitment.
So if you run MyCloudHardware, take a look.

(03:48):
Update it now or take it off thenetwork until you can replace it.
Researchers have demonstrated realtime AI voice cloning that produces
a live responsive, cloned voice.
during a phone call turning vishingfrom a prerecorded impersonation into
a realtime social engineering risk.

(04:11):
The team that developed this kepttheir framework private to avoid
abuse, but they warned that ifcriminal groups don't already have this
capability, they almost certainly will.
Soon, with only minutes of audio anda few hours of training, attackers can
create calls that sound convincing enoughto trick accountants, receptionists,

(04:33):
or perhaps even family members.
If your organization relies on phoneauthorizations for payments, or any
other type of access, put strictercontrols in place today, require
written confirmations, dual approvals,or pre-agreed secret words, and for

(04:54):
families agree on a verificationphrase with relatives and elders never.
send money or share credentialsbecause of an unexpected call?
if you don't already have theseprotections in accounting or
high risk roles, why not walkdown there today and set them up?

(05:17):
There's never been a piece of technologythis powerful that wasn't weaponized.
So let's take this as a givenand let's take this as a bit of a
fair warning and get on it today.
That's our show for today.
You can reach me with tips, comments,and even some constructive criticism

(05:37):
at the Tech Newsday contact page.
You can find [e-mail] or.ca.
I'm your host, Jim, love.
Thanks for listening.