164 article(s) in our index mention this organisation.
Cisco Talos has released CAIRN, a new research toolkit designed to identify and track AI-integrated malware. CAIRN utilizes a metadata-first approach, focusing on identifying AI-related artifacts like API endpoints, tool…
Cisco has disclosed a critical zero-day vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that allows attackers to bypass authentication and gain unauthorized access to devices. This flaw, under active…
A new JavaScript stealer, dubbed WeaselBiscuit, is spreading through 13 npm packages and leverages similarities with DPRK-linked malware like BeaverTail and OtterCookie. This malware primarily targets Chrome extension st…
A critical vulnerability (CVE-2026-58138) in Orkes Conductor allows attackers to execute arbitrary commands without authentication, and has been actively exploited in the wild for over a month. Organizations using Orkes…
Cisco Talos is advising that focusing solely on AI improvements won't solve cybersecurity problems, and that a more holistic approach – strengthening foundational security practices – is needed. The firm highlights a gro…
This week’s ThreatsDay bulletin highlights a range of security threats, including a PPI marketplace facilitating malware distribution, compromised LocalAI instances leading to data breaches and command execution, AI agen…
Cisco has released another zero-day vulnerability, this time impacting its networking equipment. This follows a trend of vulnerabilities being discovered in Cisco products, highlighting ongoing security concerns within t…
Cisco has released patches to address dozens of critical and high-severity vulnerabilities across its Secure Firewall Management Center (FMC), Identity Services Engine (ISE), and Nexus Dashboard products. Several of thes…
Ransomware attacks targeting Japanese businesses increased by approximately 4.7% in the first half of 2026, driven primarily by the activity of The Gentlemen ransomware group. The Gentlemen, leveraging a RaaS model and u…
Cisco has issued a critical security advisory regarding a zero-day vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that is currently being actively exploited. This vulnerability allows unauthenticate…
A critical zero-day vulnerability in Cisco Identity Services Engine (ISE) is actively being exploited, prompting Cisco to release emergency patches. Attackers can bypass authentication controls and gain root access, pote…
As AI increasingly uncovers vulnerabilities, many operational technology (OT) systems – particularly those running legacy software or with limited patching capabilities – are left exposed. Rather than relying on traditio…
A zero-day vulnerability in the Acronis Backup plugin for cPanel & WHM has been actively exploited in the wild. Acronis has released patches to address the issue, urging users to update their systems immediately to preve…
A Cisco email security box can be exploited to gain remote code execution, potentially allowing an attacker to take control of the device. This vulnerability stems from a flaw in how the device handles email processing,…
A critical vulnerability in Cisco Secure Email Gateway software (AsyncOS) has been actively exploited in the wild, allowing unauthenticated attackers to execute arbitrary commands with root privileges. Cisco has released…
A critical zero-day vulnerability (CVE-2026-76461) in Cisco Secure Email Gateway is actively being exploited in the wild, allowing attackers to execute arbitrary commands with root privileges. Cisco has released IoCs, bu…
A French security advisory from CERT-FR highlights multiple vulnerabilities in Cisco products, including the ability to execute arbitrary code remotely, cause a denial of service, and exploit SQL injection flaws. Cisco h…
The Russian threat group Sandworm, linked to Russia's Main Intelligence Directorate (GRU), is leveraging two vulnerabilities in Cisco's Firewall Management Center (FMC) technology to deploy an upgraded version of the Cyc…
Cisco has revealed that three distinct threat groups – including state-sponsored actors and ransomware operators – are exploiting vulnerabilities in their Secure Firewall Management Center (FMC) software to steal credent…
This week’s security news is dominated by a massive wave of Android vulnerabilities (200 total), a complex phishing campaign targeting Singpass accounts, and a growing number of exposed Plex servers. Beyond that, a Chin…
