Feed aggregator
Broadband is Expensive. CNET Survey Finds 63% of Internet Users Are Paying More Than Before
Despite paying $195 more on average than the previous year, most people still experienced speed and reliability issues.
Categories: CNET
Today's NYT Mini Crossword Answers for Thursday, April 17
Here are the answers for The New York Times Mini Crossword for April 17.
Categories: CNET
Researchers Grow Record-sized Lab Meat
Categories: SlashDot
Best Internet Providers in Pueblo, Colorado
Pueblo residents have plenty of high-speed internet plans to choose from. Check out CNET's top recommendations for ISPs in this Colorado city.
Categories: CNET
This Is Probably Why Sam Altman Wants to Build an OpenAI Social Media App
It's not because the world really needs another social media platform.
Categories: CNET
Smashing Security podcast #413: Hacking the hackers… with a credit card?
A cybersecurity firm is buying access to underground crime forums to gather intelligence. Does that seem daft to you?
And over in Nigeria, even if romance scammers would like to update their LinkedIn profiles, just how easy is it to turn a new leaf after a sweet-talking career in cybercrime?
All this and more is discussed in the latest edition of the award-winning "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.
Categories: Graham Cluely
Cisco Nexus Dashboard LDAP Username Enumeration Vulnerability
A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts.<br><br>
This vulnerability is due to the improper handling of LDAP authentication requests. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow an attacker to determine which usernames are valid LDAP user accounts.<br><br>
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.<br><br>
This advisory is available at the following link:<br><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-unenum-2xFFh472">https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-unenum-2xFFh472</a><br><br>
<br/>Security Impact Rating: Medium
<br/>CVE: CVE-2025-20150
Categories: Cisco
Cisco Webex App Client-Side Remote Code Execution Vulnerability
A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user.<br><br>
This vulnerability is due to insufficient input validation when Cisco Webex App processes a meeting invite link. An attacker could exploit this vulnerability by persuading a user to click a crafted meeting invite link and download arbitrary files. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the targeted user.<br><br>
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.<br><br>
This advisory is available at the following link:<br><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-client-rce-ufyMMYLC">https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-client-rce-ufyMMYLC</a><br><br>
<br/>Security Impact Rating: High
<br/>CVE: CVE-2025-20236
Categories: Cisco
Cisco Secure Network Analytics Privilege Escalation Vulnerability
A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as <em>root</em> on the underlying operating system.<br><br>
<div>
This vulnerability is due to insufficient integrity checks within device backup files. An attacker with valid administrative credentials could exploit this vulnerability by crafting a malicious backup file and restoring it to an affected device. A successful exploit could allow the attacker to obtain shell access on the underlying operating system with the privileges of <em>root</em>.<br><br>
</div>
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.<br><br>
This advisory is available at the following link:<br><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-prvesc-4BQmK33Z">https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-prvesc-4BQmK33Z</a><br><br>
<br/>Security Impact Rating: Medium
<br/>CVE: CVE-2025-20178
Categories: Cisco
You'll Be Able to Buy Games and More From the Xbox Mobile App Soon
Game Pass Ultimate subscribers can also stream some games they own to their Xbox consoles.
Categories: CNET