News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 5 Oct· 1 article
-
Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk
Researchers tracked 2,652 new CVEs between 28 September and 4 October 2026, with seven flaws showing confirmed exploitation. Daily Cybersecurity (DC) flagged six exploited flaws, and six appeared in CISA’s Known Exploited Vulnerabilities (KEV) catalog. Five…
Thu 1 Oct· 5 articles
-
Cisco Catalyst SD-WAN Manager5 articles this day · SecurityWeek first
Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers · Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin Access
-
Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers
Cisco has released an urgent security update for Cisco Catalyst SD-WAN Manager after the discovery of a zero-day vulnerability that is already being exploited in the wild. The flaw, tracked as CVE-2026-76504, affects the API session-based authentication…
-
Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin Access
CVE-2026-76504 is a critical authentication bypass flaw in Cisco Catalyst SD-WAN Manager (formerly vManage) that lets an unauthenticated remote attacker reach the management API with administrator privileges. Cisco reports active exploitation in September…
-
Cisco SD-WAN Flaw Exploited to Bypass Authentication as Admin
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV) catalog after reports of active exploitation. The flaw, tracked as CVE-2026-76504, carries a CVSS score of…
-
CISA Flags Actively Exploited Cisco SD-WAN Authentication Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Cisco Catalyst SD-WAN Manager’s flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is tracked as CVE-2026-76504 and carries a CVSS score of 9.8. It affects…
-
Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass
Cisco has released urgent patches for a critical authentication bypass in Catalyst SD-WAN Manager, which has been exploited in the wild. The flaw, tracked as CVE-2026-76504 with a CVSS score of 9.8, targets the API session-based authentication mechanism. It…
-
Wed 30 Sep· 4 articles
-
Cisco Catalyst SD-WAN Manager4 articles this day · Rapid7 first
CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw · Cisco Warns of Active Exploitation in Critical SD-WAN Flaw
-
CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw
CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities (KEV) catalogue on 30 September 2026. The vulnerability affects Cisco Catalyst SD-WAN Manager and is known as the Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability. It could allow an…
-
Cisco Warns of Active Exploitation in Critical SD-WAN Flaw
Cisco says attackers are exploiting a critical authentication bypass in the Cisco Catalyst SD-WAN Manager, potentially allowing remote unauthenticated access via the Manager’s API. The flaw is tracked as CVE-2026-76504 and scores 9.8 out of 10 on CVSS. It…
-
Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin Access
Cisco has identified and patched a critical authentication bypass in Cisco Catalyst SD-WAN Manager, tracked as CVE-2026-76504. The flaw, rated CVSS 9.8, lies in the API session-based authentication logic and stems from improper handling of URI encoding in an…
-
Cisco SD-WAN Flaw Exploited to Grant Attackers Admin Access
Rapid7 reports that Cisco Catalyst SD-WAN Manager is being exploited in the wild for CVE-2026-76504, a critical API authentication bypass affecting the SD-WAN Manager. The flaw stems from improper handling of URL encoding (CWE-177), enabling an…
-
Mon 21 Sep· 1 article
-
Cisco Warns of Actively Exploited Flaws Enabling Root Access
Between 14 and 20 September 2026, CVE Watchtower recorded 4,378 new vulnerabilities, including 369 rated critical. Daily Cybersecurity identified 10 as exploited, while three of those were also added to CISA’s Known Exploited Vulnerabilities (KEV) catalogue.…
Fri 18 Sep· 1 article
-
Cisco Patches Exploited ISE Flaw That Grants Attackers Root Access
Cisco has disclosed and patched CVE-2026-76460, a maximum-severity authentication bypass affecting an API endpoint in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) products. The flaw, rated 10 out of 10 on the CVSS scale,…
Thu 17 Sep· 6 articles
-
Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation
Cisco has released patches for dozens of vulnerabilities in Secure Firewall Management Centre (FMC), Identity Services Engine (ISE) and Nexus Dashboard. The ISE update addresses 20 CVEs, including 12 rated critical. Three vulnerabilities — CVE-2026-20282,…
-
Cisco Identity Services Engine3 articles this day · SecurityWeek first
Attackers Exploit Critical Cisco ISE Flaw for Root Access · CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws
-
Attackers Exploit Critical Cisco ISE Flaw for Root Access
Cisco has warned that attackers are actively exploiting CVE-2026-76460, a maximum-severity vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). The flaw, rated CVSS 10.0, results from insufficient control over…
-
CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. They are CVE-2026-76460 in Cisco Identity Services Engine (ISE), rated CVSS 10.0;…
-
Cisco Patches Zero Day Letting Attackers Take Root Access in ISE
Cisco has released urgent patches for a critical authentication-bypass vulnerability in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), after confirming that it is being exploited in the wild as a zero-day. Tracked as…
-
-
Cisco Patches Firewall Flaws Enabling Unauthenticated Root Access
Cisco fixed 18 vulnerabilities in its Secure Firewall product range on 16 September 2026, covering Firewall Management Center (FMC), Adaptive Security Appliance (ASA) and Threat Defense software. The group comprises eight critical and 10 high-severity flaws,…
-
Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin Access
Cisco issued advisories on 16 September 2026 for five critical vulnerabilities in Identity Services Engine (ISE), used to manage network access for employees, devices and visitors. The flaws affect ISE releases 3.1, 3.2, 3.3, 3.4 and 3.5, with some also…
Wed 16 Sep· 3 articles
-
Cisco Identity Services Engine2 articles this day · SecurityOnline first
Attackers Exploit Cisco ISE Flaw to Bypass Management Interface · Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access
-
Attackers Exploit Cisco ISE Flaw to Bypass Management Interface
CISA added CVE-2026-76460 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. The vulnerability affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). Cisco names it the Identity Services…
-
Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access
Cisco warned on 16 September 2026 that attackers are actively exploiting a critical vulnerability in its Identity Services Engine (ISE) and ISE-PIC products. Tracked as CVE-2026-76460, the flaw has a CVSS score of 10.0 and affects releases 3.1 through 3.5…
-
-
Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway Flaw
Cisco has confirmed active exploitation of CVE-2026-76461, a critical SQL injection vulnerability in the email-parsing logic of AsyncOS Software for Cisco Secure Email Gateway. Rated CVSS 9.8 and classified as CWE-89, the flaw can be exploited remotely…
Tue 15 Sep· 6 articles
-
Cisco Secure Email Gateway5 articles this day · SecurityOnline first
CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks · Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day
-
CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-76461, a critical Cisco Secure Email Gateway vulnerability with a CVSS score of 9.8, to its Known Exploited Vulnerabilities (KEV) catalogue. Cisco disclosed the zero-day in…
-
Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day
Cisco has disclosed a critical zero-day in its Secure Email Gateway appliances that is being exploited in the wild. Tracked as CVE-2026-76461 and rated 9.8 on the CVSS scale, the vulnerability affects both physical and virtual appliances, regardless of…
-
Cisco Email Gateway Zero Day Let Attackers Gain Root Access Remotely
Rapid7 says Cisco Secure Email Gateway is affected by CVE-2026-76461, a critical SQL injection vulnerability in AsyncOS Software. Cisco published its advisory on 14 September 2026, reporting a CVSS v3.1 score of 9.8. The flaw could allow an unauthenticated,…
-
Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw
Cisco has warned that attackers are actively exploiting CVE-2026-76461, a zero-day vulnerability in the AsyncOS software used by its Secure Email Gateway appliances. The flaw has a CVSS score of 9.8 and can reportedly be exploited remotely without…
-
Cisco Email Gateway Flaw Exploited to Gain Root Access via Email
Cisco has confirmed active exploitation of a critical vulnerability in its Secure Email Gateway, tracked as CVE-2026-76461 and rated 9.8 (Critical) under CVSSv3. The flaw affects both physical and virtual appliances, regardless of configuration. It is caused…
-
-
Cisco Patches Actively Exploited Flaws in Secure Email Appliances
Cisco has fixed five vulnerabilities in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Four are rated critical with CVSS 3 scores of 9.8, while the remaining issue is high severity with a score of 7.5. The flaws affect software releases…
Mon 14 Sep· 2 articles
-
Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops Blink
A likely Russia-linked threat actor is exploiting two vulnerabilities in Cisco Secure Firewall Management Centre (FMC) to deploy an updated version of the Cyclops Blink malware. Sophos and Cisco Talos identified the activity, while Sophos attributed it with…
-
CISA Warns of Actively Exploited Cisco Email Gateway Flaw
CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 September 2026. The vulnerability affects Cisco Secure Email Gateway and is known as the Cisco Secure Email Gateway SQL Injection Vulnerability. It could allow an…
Fri 11 Sep· 2 articles
-
Cisco Secure Firewall Management Center (FMC)2 articles this day · The Hacker News first
Cisco Firewall Flaws Exploited to Deploy Qilin Ransomware · Cisco Firewall Flaws Exploited to Deploy Web Shells and Ransomware
-
Cisco Firewall Flaws Exploited to Deploy Qilin Ransomware
Three threat groups are exploiting two recently patched Cisco Secure Firewall Management Center (FMC) flaws to steal credentials, gain root access, and deploy Qilin ransomware. Cisco Talos attributes three distinct post‑compromise activity clusters to…
-
Cisco Firewall Flaws Exploited to Deploy Web Shells and Ransomware
Cisco has disclosed ongoing exploitation of two patched vulnerabilities in its Secure Firewall Management Center (FMC) by multiple threat clusters linked to ransomware and state‑sponsored activity. CVE-2026-20079, an authentication bypass affecting FMC’s web…
-
Thu 10 Sep· 5 articles
-
CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws from Cisco, Google Chromium V8, Fortinet and Citrix NetScaler to its Known Exploited Vulnerabilities (KEV) catalog. The entries are CVE-2025-25249 (Fortinet multiple…
-
Cisco Secure Firewall Management Center (FMC)3 articles this day · CISA first
CISA Flags Cisco, Citrix and Fortinet Flaws Under Active Attack · Cisco Firewall Flaw Exploited by Sandworm and Qilin Ransomware
-
CISA Flags Cisco, Citrix and Fortinet Flaws Under Active Attack
CISA has added three actively exploited flaws to the Known Exploited Vulnerabilities (KEV) catalog, affecting Cisco, Citrix, and Fortinet products, with a deadline of 12 September 2026 for Federal Civilian Executive Branch (FCEB) agencies to apply patches.…
-
Cisco Firewall Flaw Exploited by Sandworm and Qilin Ransomware
Cisco and the US Cybersecurity and Infrastructure Security Agency (CISA) have warned that CVE-2026-20079, a critical authentication bypass flaw in Cisco Secure Firewall Management Center (FMC), has been exploited in the wild. Disclosed earlier in 2026, the…
-
CISA Flags Actively Exploited Cisco Firewall Flaw Enabling Root Access
CISA has added CVE-2026-20079 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management. It is an authentication bypass…
-
-
UEFI Shell Flaw Threatens Secure Boot on Millions of Devices
A vulnerability in the UEFI Shell module embedded in SPI flash memory has been disclosed that enables a Secure Boot bypass. Security researchers describe a critical flaw that could let an attacker execute unauthorised code during the early startup phase,…
Wed 9 Sep· 2 articles
-
Cisco Warns Attackers Are Exploiting Critical FMC Flaws for Root Access
Cisco Talos researchers say two critical flaws in Cisco Secure Firewall Management Center (FMC) are being actively exploited in the wild. The vulnerabilities are CVE-2026-20079, an authentication bypass in the FMC web interface, and CVE-2026-20316, a flaw…
-
Cisco UCS Servers Face Secure Boot Bypass via Public Exploit
Cisco has disclosed a high-severity vulnerability affecting its Unified Computing System (UCS) platform that enables a Secure Boot bypass via the UEFI shell. The flaw, tracked as CVE-2026-20293 with a CVSS v3 score of 7.1, could allow an authenticated user…
Thu 3 Sep· 5 articles
-
Cisco Patches Critical Root RCE Flaw in Silicon One Switches
Cisco has patched a critical remote code execution flaw in the Nexus 9000 series switches that use Silicon One hardware. The vulnerability, tracked as CVE-2026-20212, allows an unauthenticated attacker to run code with root privileges, with a CVSS score of…
-
Cisco Secure Email S/MIME Flaws Publicly Disclosed
The content alerts about multiple active exploits detected on September 2, 2026, concerning vulnerabilities in Cisco products. Key vulnerabilities include CVE-2026-20354 and CVE-2026-20355 related to S/MIME flaws allowing decryption of sensitive email…
