Cisco has issued a critical patch for a zero-day vulnerability in its Secure Email Gateway (SEG) that has been actively exploited by attackers. This flaw allows remote, unauthenticated users to execute commands with root privileges, posing a significant risk to organizations using the affected software. The vulnerability is particularly concerning as it can lead to unauthorized access and control over email systems, potentially compromising sensitive data. Users of Cisco's SEG are urged to apply the available patches immediately to safeguard their systems against these attacks. The situation emphasizes the need for timely updates and vigilance in protecting email infrastructures from evolving threats.
CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog, indicating they are actively being exploited. The vulnerabilities include a code injection issue in Palo Alto Networks' PAN-OS (CVE-2026-0322), a relative path traversal flaw in Cisco's Secure Email Gateway (CVE-2026-76519), and two vulnerabilities in AhsayCBS: one related to improper authentication (CVE-2026-105133) and another for command injection (CVE-2026-105134). These vulnerabilities present significant risks, particularly for federal agencies, which are required to prioritize their remediation under Binding Operational Directive 26-04. CISA urges all organizations, not just federal agencies, to adopt a risk-based approach to vulnerability management. If anyone is aware of other exploited vulnerabilities not listed, they can submit them through CISA’s nomination process.
Cisco has issued security advisories for five serious vulnerabilities in its NX-OS operating system, which runs on Nexus switches. These flaws could allow attackers to execute arbitrary code with root privileges, potentially taking full control of affected devices. Organizations that rely on Cisco Nexus switches should be particularly vigilant, as these vulnerabilities pose a significant risk to network security. The flaws can be exploited remotely, making them especially concerning for data centers and enterprises that depend on these systems for their operations. Cisco recommends that users apply the necessary patches to mitigate these risks and secure their networks.
Cisco has released a patch for a serious zero-day vulnerability found in its Catalyst SD-WAN appliances. This flaw could allow remote attackers to gain administrative access to affected devices without needing any authentication. The vulnerability poses a significant risk, as it can be exploited to take control of network infrastructure. Users of Cisco's SD-WAN products should prioritize applying the patch to safeguard their systems. The disclosure of this vulnerability emphasizes the need for organizations to remain vigilant about software updates and security practices.
Cisco has issued a warning about a critical zero-day vulnerability affecting its Catalyst SD-WAN Manager, which is used by companies to oversee their SD-WAN networks. The flaw, identified as CVE-2026-76504, allows remote attackers to exploit the system's API without needing any login credentials, essentially granting them admin-level access. This poses a significant risk to organizations using this management software, as it could lead to unauthorized control and potential data breaches. Cisco has released patches to fix the issue, but there are no workarounds available for users who need immediate protection. Companies are urged to apply the fixes as soon as possible to mitigate the risk of exploitation.
Last week, Revolut confirmed a data breach involving sensitive customer records. The breach occurred when an attacker impersonated a government agency, using an email address from that agency's domain to gain unauthorized access to the bank's systems. This incident raises significant concerns about the security of customer data and the effectiveness of identity verification processes in preventing such impersonation attacks. Meanwhile, Cisco released a patch for a zero-day vulnerability in its email gateway that had been actively exploited. This highlights ongoing challenges in cybersecurity, where organizations must remain vigilant against both social engineering tactics and technical vulnerabilities.
Cisco has issued urgent security updates to fix a serious vulnerability in its Identity Services Engine (ISE), which attackers are currently exploiting. This zero-day flaw poses a significant risk as it allows unauthorized access to networks, making it crucial for organizations using ISE to act quickly. Users of Cisco ISE are particularly vulnerable, as the exploit can lead to data breaches or unauthorized activities within their systems. The company emphasizes the importance of applying the updates immediately to mitigate potential attacks. Security professionals and IT teams should prioritize this update to protect their infrastructures from ongoing threats.
Cisco has issued a warning regarding a serious security vulnerability in its Identity Services Engine (ISE), identified as CVE-2026-76460, which carries a maximum CVSS score of 10.0. This flaw allows attackers to bypass authentication without needing any credentials, potentially exposing sensitive systems to unauthorized access. The issue stems from inadequate authentication controls on an API endpoint, making it particularly concerning as it is currently being exploited in the wild. Organizations using Cisco ISE are at risk, and immediate action is necessary to protect their networks from potential breaches. This incident underscores the importance of maintaining up-to-date security measures and promptly addressing vulnerabilities as they are disclosed.
The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating that they are currently being exploited by attackers. The vulnerabilities include CVE-2026-76460, which affects Cisco Identity Services Engine due to incorrect use of privileged APIs, and CVE-2026-87886, related to incorrect default permissions in Acronis Backup. These vulnerabilities pose significant risks, especially for federal agencies, which are required to prioritize their remediation under CISA's Binding Operational Directive 26-04. While this directive applies specifically to Federal Civilian Executive Branch agencies, CISA encourages all organizations to adopt similar risk-based practices to handle vulnerabilities effectively. Organizations are urged to check for potential compromises before applying patches to ensure their systems remain secure.
Cisco has issued a warning about a serious vulnerability in its AsyncOS software for the Cisco Secure Email Gateway, identified as CVE-2026-76461. This flaw, which has a CVSS score of 9.8, allows unauthenticated remote attackers to execute root commands due to insufficient validation in the email parsing logic. The vulnerability is currently being exploited in the wild, putting users at significant risk. Organizations using affected versions of the Cisco Secure Email Gateway should take immediate action to protect their systems. This incident underscores the importance of timely updates and vigilance in cybersecurity practices.
Last week, a Linux rootkit was discovered on F5 BIG-IP APM devices, raising significant security concerns for organizations relying on this technology. The rootkit allows attackers to gain unauthorized access and control over affected systems, potentially leading to data breaches or further attacks. Additionally, vulnerabilities in Cisco's FMC (Firepower Management Center) were actively exploited, putting users at risk of unauthorized access and manipulation of security policies. These incidents highlight the need for organizations to ensure their devices are updated and secured against such threats. Companies should prioritize patching and monitoring their systems to mitigate these risks.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified three serious vulnerabilities affecting products from Cisco, Citrix, and Fortinet. These vulnerabilities have been added to CISA's Known Exploited Vulnerabilities catalog, which means federal agencies are required to patch them by September 12, 2026. One of the vulnerabilities, CVE-2026-20079, has a maximum severity score of 10.0, indicating a critical risk. It's crucial for organizations using these products to prioritize these updates to protect against potential exploitation. Failure to address these vulnerabilities could lead to significant security breaches, putting sensitive data at risk.
Cisco has confirmed that a serious authentication bypass vulnerability, labeled CVE-2026-20079, exists in its Secure Firewall Management Center (FMC) software. This flaw allows attackers to bypass authentication mechanisms, putting systems at risk of unauthorized access. Cisco has noted that this vulnerability is currently being exploited in active attacks, which raises significant concerns for organizations using their firewall management solutions. Users of Cisco's Secure FMC should take immediate action to protect their systems, as the potential for data breaches and unauthorized activities is heightened. The situation emphasizes the need for prompt updates and vigilance in cybersecurity practices.
The Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating that these flaws are currently being exploited in the wild. The vulnerabilities include a heap-based buffer overflow in Fortinet products (CVE-2025-25249), an authentication bypass in Citrix NetScaler (CVE-2026-19490), an out-of-bounds write in Google Chromium's V8 engine (CVE-2026-87491), and another authentication bypass affecting Cisco Firewall Management Center (CVE-2026-20079). These vulnerabilities pose significant risks, especially to federal agencies, which are urged to prioritize quick remediation efforts based on a directive from CISA. While the directive primarily affects federal entities, CISA encourages all organizations to adopt similar risk-based practices to address these vulnerabilities effectively. Organizations are also invited to report any exploited vulnerabilities not yet listed in the KEV Catalog for evaluation.
Cisco has issued critical patches for a vulnerability in its Nexus 9000 series switches, specifically those based on Silicon One architecture. This flaw, identified as CVE-2026-20212, carries a CVSS score of 9.8, indicating a severe risk. It allows remote attackers, without needing to authenticate, to execute code with root privileges on impacted systems. Alongside this vulnerability, Cisco also released a hardening update for IOS XR that includes seven additional CVEs, two of which are also rated very high at 9.8. Users of these Nexus switches should prioritize applying the patches as there are currently no workarounds available for the IOS XR versions affected.