OpenAI Has a New GPT-5.4-Cyber Model. Here's Why You Can't Use It
https://www.cnet.com/tech/services-and-software/openai-gpt-5-4-cyber-model-limited-access-cybersecurity-news/
A scaled-up version of OpenAI's Trusted Access for Cyber program appears to be OpenAI's response to Anthropic's Project Glasswing.
https://www.cnet.com/tech/services-and-software/openai-gpt-5-4-cyber-model-limited-access-cybersecurity-news/
A scaled-up version of OpenAI's Trusted Access for Cyber program appears to be OpenAI's response to Anthropic's Project Glasswing.
A Garmin Trademark Filing Hints at a New Whoop-Like Wearable
https://www.cnet.com/health/garmin-trademark-filing-hints-new-whoop-like-wearable/
Between a product page leak and a trademark filing, Garmin seems to be cooking up a new recovery-tracking wearable.
https://www.cnet.com/health/garmin-trademark-filing-hints-new-whoop-like-wearable/
Between a product page leak and a trademark filing, Garmin seems to be cooking up a new recovery-tracking wearable.
SharkNinja's New $499 Vacuum Flexes Under Furniture and Can Auto-Empty
https://www.cnet.com/home/kitchen-and-household/sharkninja-499-vacuum-flexes-under-furniture-auto-empties/
The vacuum bends around furniture, and SharkNinja says its dock can hold debris for 45 days.
https://www.cnet.com/home/kitchen-and-household/sharkninja-499-vacuum-flexes-under-furniture-auto-empties/
The vacuum bends around furniture, and SharkNinja says its dock can hold debris for 45 days.
What Is Earthshine? How to Spot the Lunar Marvel in the Skies This Week
https://www.cnet.com/science/space/what-is-earthshine-best-time-to-see-it/
The best time to see Earthshine is a few days before and a few days after each new moon during the spring.
https://www.cnet.com/science/space/what-is-earthshine-best-time-to-see-it/
The best time to see Earthshine is a few days before and a few days after each new moon during the spring.
How I Use AI to Keep Up With Pop Culture
https://www.cnet.com/tech/services-and-software/how-i-use-ai-to-keep-up-with-pop-culture/
If you can feel your bones crumbling to dust every time you hear new slang, this will help you stay young in spirit and in touch with the rapidly evolving world.
https://www.cnet.com/tech/services-and-software/how-i-use-ai-to-keep-up-with-pop-culture/
If you can feel your bones crumbling to dust every time you hear new slang, this will help you stay young in spirit and in touch with the rapidly evolving world.
Today's NYT Connections: Sports Edition Hints and Answers for April 15, #569
https://www.cnet.com/tech/gaming/todays-nyt-connections-sports-edition-hints-and-answers-for-april-15-569/
Here are hints and the answers for the NYT Connections: Sports Edition puzzle for April 15 No. 569.
https://www.cnet.com/tech/gaming/todays-nyt-connections-sports-edition-hints-and-answers-for-april-15-569/
Here are hints and the answers for the NYT Connections: Sports Edition puzzle for April 15 No. 569.
WrestleMania 42: Start Time, Where to Watch and Full Match Card
https://www.cnet.com/tech/services-and-software/wrestlemania-42-start-time-where-to-watch-full-match-card/
The two-night event heads to Las Vegas this weekend.
https://www.cnet.com/tech/services-and-software/wrestlemania-42-start-time-where-to-watch-full-match-card/
The two-night event heads to Las Vegas this weekend.
Thinking of Ditching Your Apple Watch for a Whoop Band? Read This First
https://www.cnet.com/tech/mobile/thinking-of-ditching-your-apple-watch-for-a-whoop-band-read-this-first/
I wore both fitness trackers for months to find out what each gets right, and the deal-breakers that get in the way.
https://www.cnet.com/tech/mobile/thinking-of-ditching-your-apple-watch-for-a-whoop-band-read-this-first/
I wore both fitness trackers for months to find out what each gets right, and the deal-breakers that get in the way.
It's National Anime Day, and You Can Watch Free Anime to Celebrate
https://www.cnet.com/tech/services-and-software/anime-day-where-to-watch-free-anime/
We know you're paying to stream Re:Zero and Dorohedoro right now, but why not supplement your watchlist this week?
https://www.cnet.com/tech/services-and-software/anime-day-where-to-watch-free-anime/
We know you're paying to stream Re:Zero and Dorohedoro right now, but why not supplement your watchlist this week?
Beef: When to Watch Season 2 on Netflix
https://www.cnet.com/tech/services-and-software/beef-heres-how-to-watch-season-2-starring-oscar-isaac-and-carey-mulligan/
The Emmy-winning drama returns with Oscar Isaac and Carey Mulligan.
https://www.cnet.com/tech/services-and-software/beef-heres-how-to-watch-season-2-starring-oscar-isaac-and-carey-mulligan/
The Emmy-winning drama returns with Oscar Isaac and Carey Mulligan.
FBI Wi-Fi Router Hacked List: 5 Steps to Keep Your Router Safe Now
https://www.cnet.com/home/internet/fbi-wi-fi-router-hacked-list-5-steps-to-keep-your-router-safe/
The FBI and Department of Justice recently disrupted a Russian attack targeting home and small-office business routers. Here's how to protect yours.
https://www.cnet.com/home/internet/fbi-wi-fi-router-hacked-list-5-steps-to-keep-your-router-safe/
The FBI and Department of Justice recently disrupted a Russian attack targeting home and small-office business routers. Here's how to protect yours.
Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cmd-inj-5WSJcYJB?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authenticated%20Privilege%20Escalation%20Vulnerability%26vs_k=1
A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the underlying operating system and elevate privileges to root.
This vulnerability is due to insufficient validation of user supplied input. An attacker could exploit this vulnerability by providing crafted input to a specific CLI command. A successful exploit could allow the attacker to elevate their privileges to root on the underlying operating system.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cmd-inj-5WSJcYJB
Security Impact Rating: Medium
CVE: CVE-2026-20136
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cmd-inj-5WSJcYJB?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authenticated%20Privilege%20Escalation%20Vulnerability%26vs_k=1
A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the underlying operating system and elevate privileges to root.
This vulnerability is due to insufficient validation of user supplied input. An attacker could exploit this vulnerability by providing crafted input to a specific CLI command. A successful exploit could allow the attacker to elevate their privileges to root on the underlying operating system.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cmd-inj-5WSJcYJB
Security Impact Rating: Medium
CVE: CVE-2026-20136
Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Remote%20Code%20Execution%20and%20Path%20Traversal%20Vulnerabilities%26vs_k=1
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to achieve remote code execution or conduct path traversal attacks on an affected device. To exploit these vulnerabilities, the attacker must have valid administrative credentials.
For more information about these vulnerabilities, see the Details (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Remote%20Code%20Execution%20and%20Path%20Traversal%20Vulnerabilities%26vs_k=1#details) section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ
Security Impact Rating: Critical
CVE: CVE-2026-20147,CVE-2026-20148
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Remote%20Code%20Execution%20and%20Path%20Traversal%20Vulnerabilities%26vs_k=1
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to achieve remote code execution or conduct path traversal attacks on an affected device. To exploit these vulnerabilities, the attacker must have valid administrative credentials.
For more information about these vulnerabilities, see the Details (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Remote%20Code%20Execution%20and%20Path%20Traversal%20Vulnerabilities%26vs_k=1#details) section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ
Security Impact Rating: Critical
CVE: CVE-2026-20147,CVE-2026-20148
Cisco Webex Services Certificate Validation Vulnerability
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Webex%20Services%20Certificate%20Validation%20Vulnerability%26vs_k=1
A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service.
This vulnerability existed because of improper certificate validation. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by connecting to a service endpoint and supplying a crafted token. A successful exploit could have allowed the attacker to gain unauthorized access to legitimate Cisco Webex services.
Cisco has addressed this vulnerability in the Cisco Webex service. However, customer action is necessary for affected organizations that are using SSO integration. There are no workarounds that address this vulnerability.
To avoid service interruption, customers who are using SSO should upload a new identity provider (IdP) SAML certificate to Control Hub. For more information, see Manage single sign-on integration in Control Hub (https://help.webex.com/en-us/article/nstvmyo/Manage-single-sign-on-integration-in-Control-Hub#task_394598AFBCD3D73A488E6DBB99AD3214).
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL
Security Impact Rating: Critical
CVE: CVE-2026-20184
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Webex%20Services%20Certificate%20Validation%20Vulnerability%26vs_k=1
A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service.
This vulnerability existed because of improper certificate validation. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by connecting to a service endpoint and supplying a crafted token. A successful exploit could have allowed the attacker to gain unauthorized access to legitimate Cisco Webex services.
Cisco has addressed this vulnerability in the Cisco Webex service. However, customer action is necessary for affected organizations that are using SSO integration. There are no workarounds that address this vulnerability.
To avoid service interruption, customers who are using SSO should upload a new identity provider (IdP) SAML certificate to Control Hub. For more information, see Manage single sign-on integration in Control Hub (https://help.webex.com/en-us/article/nstvmyo/Manage-single-sign-on-integration-in-Control-Hub#task_394598AFBCD3D73A488E6DBB99AD3214).
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL
Security Impact Rating: Critical
CVE: CVE-2026-20184
Cisco Identity Services Engine Remote Code Execution Vulnerabilities
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Remote%20Code%20Execution%20Vulnerabilities%26vs_k=1
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the attacker must have at least Read Only Admin credentials.
These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node Cisco ISE deployments, successful exploitation of these vulnerabilities could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv
Security Impact Rating: Critical
CVE: CVE-2026-20180,CVE-2026-20186
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Remote%20Code%20Execution%20Vulnerabilities%26vs_k=1
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the attacker must have at least Read Only Admin credentials.
These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node Cisco ISE deployments, successful exploitation of these vulnerabilities could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv
Security Impact Rating: Critical
CVE: CVE-2026-20180,CVE-2026-20186
Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isexss-BS8ctE7U?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Multiple%20Cross-Site%20Scripting%20Vulnerabilities%26vs_k=1
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write privileges to conduct a stored cross-site scripting (XSS) attack or a reflected XSS attack against a user of the web-based management interface of an affected device.
These vulnerabilities are due to insufficient sanitization of user-supplied data that is stored in the web page. An attacker could exploit these vulnerabilities by convincing a user of the interface to click a specific link or view an affected web page. The injected script code may be executed in the context of the web-based management interface or allow the attacker to access sensitive browser-based information.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isexss-BS8ctE7U
Security Impact Rating: Medium
CVE: CVE-2026-20132
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isexss-BS8ctE7U?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Multiple%20Cross-Site%20Scripting%20Vulnerabilities%26vs_k=1
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write privileges to conduct a stored cross-site scripting (XSS) attack or a reflected XSS attack against a user of the web-based management interface of an affected device.
These vulnerabilities are due to insufficient sanitization of user-supplied data that is stored in the web page. An attacker could exploit these vulnerabilities by convincing a user of the interface to click a specific link or view an affected web page. The injected script code may be executed in the context of the web-based management interface or allow the attacker to access sensitive browser-based information.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isexss-BS8ctE7U
Security Impact Rating: Medium
CVE: CVE-2026-20132
How to Keep Kids Safe Online? Europe Believes Its Age Verification App Is the Answer
https://www.cnet.com/tech/services-and-software/eu-announces-age-verification-app-for-social-media/
The European Commission's new app is "technically ready and soon available," says President Ursula von der Leyen.
https://www.cnet.com/tech/services-and-software/eu-announces-age-verification-app-for-social-media/
The European Commission's new app is "technically ready and soon available," says President Ursula von der Leyen.
Amazon's New Fire TV Stick HD Doesn't Have to Plug Into the Wall
https://www.cnet.com/tech/home-entertainment/amazon-launches-fire-tv-stick-hd/
Amazon says the slimmer, faster device will start shipping by the end of April.
https://www.cnet.com/tech/home-entertainment/amazon-launches-fire-tv-stick-hd/
Amazon says the slimmer, faster device will start shipping by the end of April.
Adobe Is Working With Anthropic to Bring a Creative AI Agent to Claude
https://www.cnet.com/tech/services-and-software/adobe-firefly-assistant-anthropic-claude-news/
Adobe's Firefly AI is getting a new agentic assistant.
https://www.cnet.com/tech/services-and-software/adobe-firefly-assistant-anthropic-claude-news/
Adobe's Firefly AI is getting a new agentic assistant.
Denon's New AVR-S980H Breaks Receiver Drought for Home Theater Fans
https://www.cnet.com/tech/home-entertainment/denon-avr-s980h-new-dolby-atmos-receiver/
The Dolby Atmos receiver includes improved streaming support and extra gaming features.
https://www.cnet.com/tech/home-entertainment/denon-avr-s980h-new-dolby-atmos-receiver/
The Dolby Atmos receiver includes improved streaming support and extra gaming features.
Nintendo's Made a Weird Animal Crossing. Tomodachi Life Has Me Living Like an Odd God
https://www.cnet.com/tech/gaming/nintendo-tomodachi-life-switch-game-a-weird-animal-crossing/
I've been collecting people into my human zoo and conducting social experiments. Tell me this is OK.
https://www.cnet.com/tech/gaming/nintendo-tomodachi-life-switch-game-a-weird-animal-crossing/
I've been collecting people into my human zoo and conducting social experiments. Tell me this is OK.