Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Unauthenticated%20Remote%20Code%20Execution%20Vulnerabilities%26vs_k=1

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to issue commands on the underlying operating system as the root user.
For more information about these vulnerabilities, see the Details (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Unauthenticated%20Remote%20Code%20Execution%20Vulnerabilities%26vs_k=1#details) section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6

Security Impact Rating: Critical


CVE: CVE-2025-20281,CVE-2025-20282

Before Avini Knew Cisco, Her Journey Had Already Begun
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m06/before-avini-knew-cisco-her-journey-had-already-begun.html?source=rss

Avini Oberoi shares her story of leaving and returning to Cisco and evolving across roles, regions, and life phases.
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)

Cisco India’s Journey to Opportunity — positive impact at scale
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m06/cisco-india-journey-to-opportunity-positive-impact-at-scale.html?source=rss

In 2015, Cisco pledged to bring tech-driven transformation to 50 million lives in India. Earlier this year, the goal was surpassed.
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)

A New Era for Networking and the Future of Work
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m06/a-new-era-for-networking-and-the-future-of-work.html?source=rss

Our vision for AgenticOps is to proactively help you manage and troubleshoot your networks, transforming the way you work by placing AI at the very center of your experience.
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)

Cisco Identity Services Stored Cross-Site Scripting Vulnerability
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-stored-xss-Yff54m73?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Stored%20Cross-Site%20Scripting%20Vulnerability%26vs_k=1

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.
This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-stored-xss-Yff54m73

Security Impact Rating: Medium


CVE: CVE-2025-20267

Cisco & Wells Fargo to Host Silicon One Tech Talk
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m06/cisco-wells-fargo-to-host-silicon-one-tech-talk.html?source=rss

Cisco will host a Tech Talk to discuss Silicon One.
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)

Empowering Europe’s digital future: Cisco’s commitment to customer choice, control, and data sovereignty
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m07/empowering-europe-digital-future.html?source=rss

Cisco is providing solutions that align with our European customers' values and requirements, and we’re dedicated to offering the security, resilience, and innovation they need to shape their digital futures with confidence.
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)

Escaping Alcatraz — for a Good Cause
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m07/escaping-alcatraz-for-a-good-cause.html?source=rss

What did you do last weekend? Alastair Tucker Brown escaped from Alcatraz while raising money for Dementia UK.
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)