CISCO WARNS OF MAX SEVERITY ISE ZERO-DAY EXPLOITED IN ATTACKS

Summary from the TLDR InfoSec newsletter

Cisco released security updates to address vulnerabilities in its Identity Services Engine, including a maximum-severity authentication bypass. An attacker could exploit the vulnerability to bypass authentication in the web-based management interface by sending a crafted request to affected endpoints. The Cisco PSIRT has identified this vulnerability as actively exploited and urges customers to update immediately.