MeatMutts

Cisco has removed a hardcoded "root" SSH credential from its flagship Unified Communications Manager (Unified CM) platform. Left unpatched, this oversight could have allowed threat actors to gain unauthorized system control and compromise sensitive communications data. Administrators are urged to assess and update their deployments without delay. Understanding the Vulnerability in Depth The vulnerability arises from a root-level account credential embedded directly into Unified CM software images during development and testing. Unlike typical administrative accounts, this credential was immutable by standard configuration interfaces, effectively creating an undetectable entry point once the system was in production. Attackers exploiting this flaw could log in over SSH as root, granting full read, write, and execution privileges across the operating system, application services, and all stored voice data. While Cisco safeguards its commercial releases with extensive pre...

The Unfolding Breach and Its Impact On July 2, 2025, benefits administration specialist Kelly & Associates Insurance Group (dba Kelly Benefits) publicly disclosed a data breach affecting over 550,000 individuals across 46 client organizations. The incident, first detected in mid-December 2024, saw unauthorized actors siphon sensitive files harboring personal and health information, marking one of the most significant exposures in the employee benefits sector in recent memory. Timeline of Detection and Disclosure Suspicious network activity was identified by Kelly Benefits’ security team on December 17, 2024, prompting the immediate engagement of third-party digital forensics experts. Investigators confirmed unauthorized access occurred between December 12–17, during which files containing personal data were copied and exfiltrated. Public notification began on April 9, 2025, with initial estimates of 32,234 impacted individuals; that figure was subsequently revised to ...

On June 30, 2025, the U.S. Department of Justice (DOJ) and Microsoft unveiled one of the most sophisticated disruptions of state-sponsored cyber intrusion in recent memory. In a coordinated sweep, law enforcement seized 29 laptop farms, froze 29 bank accounts, dismantled 21 fraudulent websites, and arrested a key facilitator Zhenxing “Danny” Wang who helped embed North Korean IT operatives inside more than 100 U.S. companies. A New Front in the Cyber Cold War The digital revolution has empowered companies to tap talent from across the globe. Yet, as remote work skyrockets, bad actors seize the opportunity to disguise themselves behind the veneer of legitimate employment. This latest crackdown exposes how North Korea’s regime exploited U.S. hiring practices to funnel millions back into weapons programs. The DOJ estimates these schemes generated at least $5 million in direct revenue and independent analysts put the total closer to $88 million over six years. The scale and ingenuit...