SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Over 4,000 Cisco ISE Instances Exposed Online Amid Critical Auth Bypass Flaw

0
·1 views

A critical authentication bypass vulnerability, CVE-2026-76460, rated 10.0, has been disclosed in Cisco Identity Services Engine, allowing unauthenticated attackers to gain root access on affected nodes. A ZoomEye scan conducted on September 22, 2026, identified 4,076 publicly reachable ISE instances using the app='Cisco ISE' fingerprint query. Cisco ISE is an administrative network access control platform and has no legitimate reason to be exposed to the public internet, making each exposed instance a security concern in itself. Cisco has released branch-specific patches across versions 3.1 through 3.5, while version 3.0, which is also affected, has reached end of software maintenance. Security teams are advised to verify whether their ISE nodes are internet-facing, apply relevant patches, restrict management interface access via ACLs, and review logs for signs of suspicious activity.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

AWS S3 vs EBS vs EFS: Key Differences and When to Use Each

Amazon Web Services offers three distinct storage solutions — S3, EBS, and EFS — each designed for fundamentally different use cases. EBS functions as a virtual hard drive attached to a single EC2 instance, making it suitable for operating systems and databases requiring low-latency block access. EFS is a managed network file system that multiple instances can mount simultaneously, ideal for shared workloads across servers, though it costs more per GB than EBS. S3 is object storage accessed via HTTP API rather than a file system, best suited for backups, static assets, logs, and data lakes at a cheaper per-GB cost. Choosing the wrong service is a common beginner mistake that can result in inefficient architectures and higher-than-expected cloud bills.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

In-Process PII Scrubbing Tool 'The Cleaner' Aims to Stop LLM Data Leaks

Developers building AI agents risk exposing sensitive user data — such as credit card numbers, IBANs, and personal emails — by passing raw database records directly into large language model contexts. Once that data leaves the server, it can end up in third-party provider logs, inference caches, or even be echoed back in public-facing chat responses. A proposed solution called 'The Cleaner', part of the avantGate security framework, runs in-process to mask PII before any payload crosses the network boundary to an external LLM. It operates on a zero-trust principle, intercepting inputs at ingress and enforcing a dual-channel tool boundary that sends restricted data to the model while routing full payloads directly to the client. The approach is designed to help teams meet compliance requirements under GDPR, HIPAA, and PCI-DSS without adding significant network latency.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

OpenAI Rates GPT-6 Astra Critical for Cybersecurity Risk Over Zero-Day Exploit Ability

OpenAI has assigned its first-ever Critical cybersecurity rating to GPT-6 Astra, a model capable of autonomously discovering zero-day vulnerabilities and building working exploits. Although the capability is currently gated, security experts warn that similar tools could reach malicious actors sooner than anticipated. In response, security practitioners are advising organisations to audit their cloud environments by mapping all publicly exposed assets — including IPs, S3 buckets, load balancers, and admin panels — and eliminating unnecessary exposure. Teams are also urged to measure and reduce patch latency specifically for internet-facing systems, as faster exploit development shrinks the window between vulnerability disclosure and active exploitation. Additional recommended steps include enforcing least-privilege IAM permissions on exposed workloads and deploying independent anomaly detection to catch signs of compromise early.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Claude Code Subagents Ate 48% of One Developer's Bill While Producing 0.9% of Output

A developer analyzing a month of Claude Code usage discovered that AI subagents accounted for 48% of total costs despite generating only 0.9% of output tokens. The disparity stems from how agent loops work: every tool call resends the full context window, including system prompts, tool schemas, memory files, and prior conversation history. In the developer's setup, each subagent began with roughly 51,000 tokens of fixed overhead, which was re-sent on every single model request within the loop. Long main sessions compounded the problem, with 45 sessions exceeding $100 each and accounting for 79% of total spend. The developer now recommends capping agents per run, batching smaller tasks into a single agent, trimming starting context, and handing off to a fresh session before context grows too large.

0 comments Read more at DEV Community
Over 4,000 Cisco ISE Instances Exposed Online Amid Critical Auth Bypass Flaw · ShortSingh