ESET Threat Report H1 2025

June 27, 2025

A view of the H1 2025 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts

Source: Read More

Previous ArticlePUBLOAD and Pubshell Malware Used in Mustang Panda’s Tibet-Specific Attack

Next Article New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

Highlights

CVE-2025-20130 – “Cisco ISE File Upload Vulnerability”

June 4, 2025

CVE ID : CVE-2025-20130

Published : June 4, 2025, 5:15 p.m. | 2 hours, 21 minutes ago

Description : A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device.

This vulnerability is due to improper validation of the file copy function. An attacker could exploit this vulnerability by sending a crafted file upload request to a specific API endpoint. A successful exploit could allow the attacker to upload arbitrary files to an affected system.

Severity: 4.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

I don’t care about Amazon Prime Day, but you loved my favorite ANC wireless headphones last time I wrote about them — and that hot discount is back

July 9, 2025

New UX/UI Tools I’m Loving! – Microsoft UX Certificate, Figma Updates, OpenAI Academy & Mor

April 9, 2025

CVE-2025-30743 – Oracle Lease and Finance Management HTTP Internal Operations Unauthorized Access and Data Manipulation

July 16, 2025

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

ESET Threat Report H1 2025

GPT-5 is Coming: Revolutionizing Software Testing

Win the Accessibility Game: Combining AI with Human Judgment

CVE-2025-4492 – Campcodes Online Food Ordering System SQL Injection Vulnerability

CVE-2025-27689 – Dell iDRAC Tools Privilege Escalation

How Kepler democratized AI access and enhanced client services with Amazon Q Business

This rugged smartphone has a highly-functional feature that made my iPhone look bad

CVE-2025-20130 – “Cisco ISE File Upload Vulnerability”

I don’t care about Amazon Prime Day, but you loved my favorite ANC wireless headphones last time I wrote about them — and that hot discount is back

New UX/UI Tools I’m Loving! – Microsoft UX Certificate, Figma Updates, OpenAI Academy & Mor

CVE-2025-30743 – Oracle Lease and Finance Management HTTP Internal Operations Unauthorized Access and Data Manipulation

ESET Threat Report H1 2025

Related Posts