News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 19 Oct· 1 article
-
Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin
Between 12 and 18 October 2026, CVE Watchtower logged 5,499 new vulnerabilities, with this weekly review tracking 12 exploited flaws. Six of those were flagged by Daily Cybersecurity’s intelligence sources, and three of the exploited flaws are not yet…
Fri 16 Oct· 1 article
-
China-linked hackers exploited BeyondTrust zero-day to steal credentials
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Thu 15 Oct· 4 articles
-
CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four newly observed vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The list comprises CVE-2026-0322 (Palo Alto Networks PAN-OS code injection), CVE-2026-76519…
-
Cisco Secure Email3 articles this day · SecurityWeek first
Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access · Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access
-
Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access
Cisco and Palo Alto Networks have issued patches for two actively exploited zero-day vulnerabilities that can enable root-level code execution on security appliances. The flaws, CVE-2026-76519 and CVE-2026-0322, have been added to the US CISA Known Exploited…
-
Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access
Cisco has disclosed a critical flaw in its Secure Email Gateway that threat actors have been actively exploiting, tracked as CVE-2026-76519 with a CVSS of 9.8. The vulnerability resides in the Advanced Malware Protection (AMP) feature and stems from improper…
-
Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access
Cisco has disclosed that attackers are actively exploiting a critical vulnerability in its Secure Email Gateway (SEG), tracked as CVE-2026-76519 with a CVSS of 9.8/10. The flaw affects the AMP (Advanced Malware Protection) component and arises when…
-
Wed 14 Oct· 3 articles
-
Cisco Secure Email3 articles this day · The Hacker News first
Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys · CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score
-
Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys
Cisco’s Secure Email Gateway is being exploited in the wild for CVE-2026-76519, a critical arbitrary file write vulnerability rated CVSS 3.1 v3.1 9.8. The flaw lies in the AMP File Reputation feature, specifically in how the file reputation service handles…
-
CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score
CISA added CVE-2026-76519 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The Cisco Secure Email Gateway Relative Path Traversal Vulnerability affects Cisco Secure Email Gateway and could let an unauthenticated remote attacker…
-
Cisco Email Gateway Flaw Exploited to Run Commands as Root
Cisco has warned that active attacks are exploiting a critical vulnerability in its Secure Email Gateway. The flaw, tracked as CVE-2026-76519 (CVSS 9.8), can allow a sender with no login to write files to the appliance’s operating system and, if successful,…
-
Mon 5 Oct· 1 article
-
Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk
Researchers tracked 2,652 new CVEs between 28 September and 4 October 2026, with seven flaws showing confirmed exploitation. Daily Cybersecurity (DC) flagged six exploited flaws, and six appeared in CISA’s Known Exploited Vulnerabilities (KEV) catalog. Five…
Thu 1 Oct· 5 articles
-
Cisco Catalyst SD-WAN Manager5 articles this day · SecurityWeek first
Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers · Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin Access
-
Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers
Cisco has released an urgent security update for Cisco Catalyst SD-WAN Manager after the discovery of a zero-day vulnerability that is already being exploited in the wild. The flaw, tracked as CVE-2026-76504, affects the API session-based authentication…
-
Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin Access
CVE-2026-76504 is a critical authentication bypass flaw in Cisco Catalyst SD-WAN Manager (formerly vManage) that lets an unauthenticated remote attacker reach the management API with administrator privileges. Cisco reports active exploitation in September…
-
Cisco SD-WAN Flaw Exploited to Bypass Authentication as Admin
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV) catalog after reports of active exploitation. The flaw, tracked as CVE-2026-76504, carries a CVSS score of…
-
CISA Flags Actively Exploited Cisco SD-WAN Authentication Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Cisco Catalyst SD-WAN Manager’s flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is tracked as CVE-2026-76504 and carries a CVSS score of 9.8. It affects…
-
Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass
Cisco has released urgent patches for a critical authentication bypass in Catalyst SD-WAN Manager, which has been exploited in the wild. The flaw, tracked as CVE-2026-76504 with a CVSS score of 9.8, targets the API session-based authentication mechanism. It…
-
Wed 30 Sep· 4 articles
-
Cisco Catalyst SD-WAN Manager4 articles this day · Rapid7 first
CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw · Cisco Warns of Active Exploitation in Critical SD-WAN Flaw
-
CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw
CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities (KEV) catalogue on 30 September 2026. The vulnerability affects Cisco Catalyst SD-WAN Manager and is known as the Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability. It could allow an…
-
Cisco Warns of Active Exploitation in Critical SD-WAN Flaw
Cisco says attackers are exploiting a critical authentication bypass in the Cisco Catalyst SD-WAN Manager, potentially allowing remote unauthenticated access via the Manager’s API. The flaw is tracked as CVE-2026-76504 and scores 9.8 out of 10 on CVSS. It…
-
Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin Access
Cisco has identified and patched a critical authentication bypass in Cisco Catalyst SD-WAN Manager, tracked as CVE-2026-76504. The flaw, rated CVSS 9.8, lies in the API session-based authentication logic and stems from improper handling of URI encoding in an…
-
Cisco SD-WAN Flaw Exploited to Grant Attackers Admin Access
Rapid7 reports that Cisco Catalyst SD-WAN Manager is being exploited in the wild for CVE-2026-76504, a critical API authentication bypass affecting the SD-WAN Manager. The flaw stems from improper handling of URL encoding (CWE-177), enabling an…
-
Mon 21 Sep· 1 article
-
Cisco Warns of Actively Exploited Flaws Enabling Root Access
Between 14 and 20 September 2026, CVE Watchtower recorded 4,378 new vulnerabilities, including 369 rated critical. Daily Cybersecurity identified 10 as exploited, while three of those were also added to CISA’s Known Exploited Vulnerabilities (KEV) catalogue.…
Fri 18 Sep· 1 article
-
Cisco Patches Exploited ISE Flaw That Grants Attackers Root Access
Cisco has disclosed and patched CVE-2026-76460, a maximum-severity authentication bypass affecting an API endpoint in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) products. The flaw, rated 10 out of 10 on the CVSS scale,…
Thu 17 Sep· 4 articles
-
Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation
Cisco has released patches for dozens of vulnerabilities in Secure Firewall Management Centre (FMC), Identity Services Engine (ISE) and Nexus Dashboard. The ISE update addresses 20 CVEs, including 12 rated critical. Three vulnerabilities — CVE-2026-20282,…
-
Cisco Identity Services Engine3 articles this day · SecurityWeek first
Attackers Exploit Critical Cisco ISE Flaw for Root Access · CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws
-
Attackers Exploit Critical Cisco ISE Flaw for Root Access
Cisco has warned that attackers are actively exploiting CVE-2026-76460, a maximum-severity vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). The flaw, rated CVSS 10.0, results from insufficient control over…
-
CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. They are CVE-2026-76460 in Cisco Identity Services Engine (ISE), rated CVSS 10.0;…
-
Cisco Patches Zero Day Letting Attackers Take Root Access in ISE
Cisco has released urgent patches for a critical authentication-bypass vulnerability in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), after confirming that it is being exploited in the wild as a zero-day. Tracked as…
-
Wed 16 Sep· 3 articles
-
Cisco Identity Services Engine2 articles this day · SecurityOnline first
Attackers Exploit Cisco ISE Flaw to Bypass Management Interface · Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access
-
Attackers Exploit Cisco ISE Flaw to Bypass Management Interface
CISA added CVE-2026-76460 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. The vulnerability affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). Cisco names it the Identity Services…
-
Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access
Cisco warned on 16 September 2026 that attackers are actively exploiting a critical vulnerability in its Identity Services Engine (ISE) and ISE-PIC products. Tracked as CVE-2026-76460, the flaw has a CVSS score of 10.0 and affects releases 3.1 through 3.5…
-
-
Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway Flaw
Cisco has confirmed active exploitation of CVE-2026-76461, a critical SQL injection vulnerability in the email-parsing logic of AsyncOS Software for Cisco Secure Email Gateway. Rated CVSS 9.8 and classified as CWE-89, the flaw can be exploited remotely…
Tue 15 Sep· 5 articles
-
Cisco Secure Email Gateway5 articles this day · SecurityOnline first
CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks · Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day
-
CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-76461, a critical Cisco Secure Email Gateway vulnerability with a CVSS score of 9.8, to its Known Exploited Vulnerabilities (KEV) catalogue. Cisco disclosed the zero-day in…
-
Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day
Cisco has disclosed a critical zero-day in its Secure Email Gateway appliances that is being exploited in the wild. Tracked as CVE-2026-76461 and rated 9.8 on the CVSS scale, the vulnerability affects both physical and virtual appliances, regardless of…
-
Cisco Email Gateway Zero Day Let Attackers Gain Root Access Remotely
Rapid7 says Cisco Secure Email Gateway is affected by CVE-2026-76461, a critical SQL injection vulnerability in AsyncOS Software. Cisco published its advisory on 14 September 2026, reporting a CVSS v3.1 score of 9.8. The flaw could allow an unauthenticated,…
-
Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw
Cisco has warned that attackers are actively exploiting CVE-2026-76461, a zero-day vulnerability in the AsyncOS software used by its Secure Email Gateway appliances. The flaw has a CVSS score of 9.8 and can reportedly be exploited remotely without…
-
Cisco Email Gateway Flaw Exploited to Gain Root Access via Email
Cisco has confirmed active exploitation of a critical vulnerability in its Secure Email Gateway, tracked as CVE-2026-76461 and rated 9.8 (Critical) under CVSSv3. The flaw affects both physical and virtual appliances, regardless of configuration. It is caused…
-
Mon 14 Sep· 2 articles
-
Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops Blink
A likely Russia-linked threat actor is exploiting two vulnerabilities in Cisco Secure Firewall Management Centre (FMC) to deploy an updated version of the Cyclops Blink malware. Sophos and Cisco Talos identified the activity, while Sophos attributed it with…
-
CISA Warns of Actively Exploited Cisco Email Gateway Flaw
CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 September 2026. The vulnerability affects Cisco Secure Email Gateway and is known as the Cisco Secure Email Gateway SQL Injection Vulnerability. It could allow an…
Fri 11 Sep· 2 articles
-
Cisco Secure Firewall Management Center (FMC)2 articles this day · The Hacker News first
Cisco Firewall Flaws Exploited to Deploy Qilin Ransomware · Cisco Firewall Flaws Exploited to Deploy Web Shells and Ransomware
-
Cisco Firewall Flaws Exploited to Deploy Qilin Ransomware
Three threat groups are exploiting two recently patched Cisco Secure Firewall Management Center (FMC) flaws to steal credentials, gain root access, and deploy Qilin ransomware. Cisco Talos attributes three distinct post‑compromise activity clusters to…
-
Cisco Firewall Flaws Exploited to Deploy Web Shells and Ransomware
Cisco has disclosed ongoing exploitation of two patched vulnerabilities in its Secure Firewall Management Center (FMC) by multiple threat clusters linked to ransomware and state‑sponsored activity. CVE-2026-20079, an authentication bypass affecting FMC’s web…
-
Thu 10 Sep· 4 articles
-
CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws from Cisco, Google Chromium V8, Fortinet and Citrix NetScaler to its Known Exploited Vulnerabilities (KEV) catalog. The entries are CVE-2025-25249 (Fortinet multiple…
-
Cisco Secure Firewall Management Center (FMC)2 articles this day · SecurityWeek first
CISA Flags Cisco, Citrix and Fortinet Flaws Under Active Attack · Cisco Firewall Flaw Exploited by Sandworm and Qilin Ransomware
-
CISA Flags Cisco, Citrix and Fortinet Flaws Under Active Attack
CISA has added three actively exploited flaws to the Known Exploited Vulnerabilities (KEV) catalog, affecting Cisco, Citrix, and Fortinet products, with a deadline of 12 September 2026 for Federal Civilian Executive Branch (FCEB) agencies to apply patches.…
-
Cisco Firewall Flaw Exploited by Sandworm and Qilin Ransomware
Cisco and the US Cybersecurity and Infrastructure Security Agency (CISA) have warned that CVE-2026-20079, a critical authentication bypass flaw in Cisco Secure Firewall Management Center (FMC), has been exploited in the wild. Disclosed earlier in 2026, the…
-
