Tracked by 2 people
Link — click to select, then copy:
https://breachfeed.com/article/cmu555e6k93z7hpu2dyehh6pwRemote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests. The post Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu4jscpn8gcxhpu275pfxesfCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CVE-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp5002bhku2o55vvzgcCisco zero-day goes straight to root BambooToken branches into Linux CenterPoint breach claim hits 7M+ Get the show notes here: https://cisoseries.com/cybersecurity-news-september-16-2026/ Huge thanks to our episode sponsor, Vanta Risk and regulation are ramping up, and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC…
Link — click to select, then copy:
https://breachfeed.com/article/cmu33lhpy6urghpu2st0y0cz2Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the device by simply sending malicious crafted emails to users. The flaw was already being exploited in the wild when the fixes were released. Tracked as CVE-2026-76461, the vulnerability is described by Cisco as an SQL injection caused by insufficient validation in the product’s email parsing code. Parsing incoming email messages for threats is this…
Link — click to select, then copy:
https://breachfeed.com/article/cmu2uiuok6krfhpu24nmh1dj6The company confirmed the defect was exploited before it was disclosed and patched, but it did not describe the nature of the attacks or the scope of impact across its customer base. The post Cisco warns customers of actively exploited zero-day in email gateways appeared first on CyberScoop.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2cy4mv61a8hpu228dspo7pCisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu2ag43t5yjahpu2rkzh46ouCisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker
Link — click to select, then copy:
https://breachfeed.com/article/cmu284j1y5vzrhpu2gkyd3uzpAn unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges. The post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2pldwo6fc5hpu29jeauluqCategories: Threat Research Tags: advisory, vulnerability, Cisco
Link — click to select, then copy:
https://breachfeed.com/article/cmu1s4e365e9nhpu2tbjyshzkThe notorious Russian threat group is spreading an upgraded version of the botnet malware, which the FBI disrupted in 2022.