The NSA’s latest breach has exposed vulnerabilities in a security system used to detect malware infections.
Axxon, the company that makes the Axxon Security System, said the vulnerability, discovered in early May, could allow an attacker to bypass a password and gain access to data.
“A user could gain unauthorized access to Axxon’s data, including its encryption keys, as well as its user credentials,” the company said in a blog post announcing the vulnerability.
“If an attacker gains access to the Axton system, they could exploit these vulnerabilities to decrypt user data.”
Axxon did not say how much it was paying to fix the vulnerability and declined to provide any more details about the vulnerability it disclosed.
The company said it had patched the vulnerability before it was publicly disclosed in May.
The NSA is not the only one to find a vulnerability in Axxon.
In August, Symantec reported a similar vulnerability in a different security system.
Microsoft also said it was “currently investigating the potential security vulnerability in the Axox security system.”
In a statement, Microsoft said it “does not believe that the AxX software has been compromised.”
Microsoft said that the vulnerability was found “through a Microsoft-provided vulnerability scanner,” and that the company had implemented “several security improvements.”
The company has not said how much money it was paid for the security fixes.
Axox said in the statement that it was working with Microsoft to resolve the issue.
The Axxon system is designed to detect and report a wide variety of malware infections, including viruses, ransomware, botnets, botnet worms, trojans, and other malware.
The system scans the Internet for suspicious traffic and sends alerts when it detects that it has detected any suspicious activity.
Axxos security system is configured to receive information from multiple sources, including a firewall, DNS, a DNS server, or other third-party sources, according to the company.
If the system detects a malicious link, it uses that information to generate a “unique identifier” for the malicious link.
If that unique identifier identifies the malware itself, it sends the link to the network administrator, who in turn sends the unique identifier to Microsoft.
The Microsoft software is also used to authenticate users when they log into the system, and to help protect the Axxo systems from unauthorized access.
Axonys security system can be used to help the government track down hackers who attempt to gain unauthorized entry into the networks of other organizations, Axxon said in its blog post.
Axons security system was created in 2012 by Axxon Technologies, Inc. The vulnerability was first discovered by the company in March and was reported to Microsoft in early June.
Microsoft said in an advisory that “the vulnerability is being actively reviewed by the Axon Technologies team, and we will make the necessary improvements as soon as they are available.”