Cisco FMC Critical Flaw CVE-2026-20316 Actively Exploited via Static Credentials

·1 views

Cisco has warned that a critical vulnerability in its Firewall Management Center (FMC), tracked as CVE-2026-20316, is being actively exploited in zero-day attacks as of July 29, 2026. Attackers are leveraging hardcoded static credentials tied to a built-in low-privilege account to gain initial access to exposed FMC management interfaces. This foothold is then chained with a separate FMC vulnerability to escalate privileges to root, enabling theft of management credentials, keys, certificates, and configuration data. A forensic indicator of compromise is the execution of package_info.pl /var/tmp/license.tmp by the web process running as root, visible in system logs. Cisco urges affected users on versions 7.0 through 7.7 and 10.0 to apply available hotfixes immediately and restrict management plane access to trusted networks.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer solves AI image generation crashes by freeing RAM, not closing editor

A developer running a local FLUX 12B AI image generation pipeline on a 16GB M4 Mac repeatedly hit memory-triggered safety kills that halted output while keeping the machine stable. The core problem was that the model's weights alone consumed around 7–9GB at runtime, leaving no headroom when the dev environment and other apps were also running. After experimenting with lower quantization and isolating variables, the developer found that raising available free memory from 51% to 71% before starting generation — primarily by closing a heavy browser — was the decisive fix. Switching from 4-bit to 3-bit quantization offered an additional ~2.5GB peak reduction, though it proved optional once sufficient RAM was freed. The debugging process highlighted how resident model weights, not output size, drive memory usage in large AI workloads.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Rob Pike: The Engineer Behind UTF-8 and the Go Programming Language

Rob Pike, born in 1956, began his career at Bell Labs in 1980, where he collaborated with Unix and C creators Ken Thompson and Dennis Ritchie on influential systems including Plan 9 and Inferno OS. In September 1992, Pike and Thompson designed UTF-8 in a single evening at a New Jersey diner, with Thompson sketching the encoding scheme on a placemat; within days, Plan 9 ran on UTF-8 as a full system. Today, UTF-8 powers nearly 98% of the web, enabling billions of users to exchange text in non-Latin scripts without data corruption. After joining Google in 2002, Pike teamed up with Thompson and Robert Griesemer in September 2007 to design a new programming language while waiting for a slow build to complete. Go was open-sourced by Google in November 2009, with its concurrency model — goroutines and channels — tracing a direct lineage back to Pike's experimental language Newsqueak from 1989.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Two Queries on the Same Table Can Return Different Row Counts

Two queries run against the same Iceberg table can return different row counts without either failing — one querying the catalog and another scanning storage directly returned results differing by over 211,000 rows. The discrepancy arises because Delta and Iceberg tables separate physical storage from logical table state, meaning a folder scan sees all Parquet files while a catalog query reads only those tied to a specific snapshot or version. Additional objects in storage may belong to older table versions, abandoned writes, or files superseded by delete metadata, none of which affect a committed snapshot's row count. To diagnose such differences, analysts should first resolve the exact Delta version or Iceberg snapshot used, follow the metadata chain to identify active data and delete files, and only then compare row counts. A query returning results successfully does not guarantee it read the intended table state or that all referenced files were accessible.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Animated CSS String Bean Casserole for Frontend Challenge

A developer submitted a CSS art project to the DEV Community's Frontend Challenge: Comfort Food Edition, recreating a string bean casserole as a pure CSS animated illustration. The project consists of three files — index.html, style.css, and script.js — and renders a visually styled, bubbling casserole dish using only CSS techniques. Beyond the artwork, the page also includes three recipe variations: a classic green bean casserole, a cheesy bacon version, and a vegan crispy onion alternative. Each recipe comes with a full ingredient list, step-by-step directions, and details on prep time, cook time, and serving size. The submission highlights CSS as the primary creative tool, combining front-end design skills with practical recipe content.

0 comments Read more at DEV Community