February 7th, 2025

Recent cybersecurity news includes information on a critical Cisco ISE bug, a former Google engineer charged with stealing AI trade secrets, and Kimsuky hackers using a new custom RDP Wrapper for remote access. A critical vulnerability in Cisco's Identity Services Engine (ISE) allows attackers with read-only admin privileges to execute arbitrary commands as root. This vulnerability is due to insecure deserialization of Java byte streams. A former Google engineer is accused of stealing AI technology, including code and configuration details for Google's AI projects, and using it to start a company in China. The North Korean hacking group Kimsuky has been observed using a custom-built RDP Wrapper and proxy tools to directly access infected machines. This custom RDP wrapper helps them evade detection and gain persistent access to systems.