Cisco make-me-root email bug exploited as a 0-day by unknown crims
Cisco has revealed a critical, 0-day vulnerability in its Secure Email Gateway (SEG) that’s being actively exploited by unknown attackers.
184 article(s) in our index mention this organisation.
Cisco has revealed a critical, 0-day vulnerability in its Secure Email Gateway (SEG) that’s being actively exploited by unknown attackers.
Security researchers, including those at Cisco and Nvidia, are focusing on bolstering infrastructure security, particularly with AI-optimized hardware. Additionally, a security firm acquired a Swiss cybersecurity busines…
Cisco has contacted customers of its managed Secure Email Cloud service and is engaged in remediation.
Ivanti has released a patch to address a zero-day vulnerability in Connect Secure, following reports of in-the-wild attacks. The vulnerability has been patched, but the article also mentions other security incidents, inc…
Threat actors are increasingly leveraging AI to speed up attacks, while others are exploiting vulnerabilities in popular tools and services. Several arrests were made in connection with ShinyHunters, and a new DarkSword…
This week's Threat Source newsletter highlights a growing trend of malware authors embedding natural language instructions into their code to evade AI-assisted analysis. The core takeaway is that attackers are proactivel…
Cisco has released security updates to address 35 vulnerabilities across its products, including over a dozen critical issues.
Cisco has announced multiple vulnerabilities across its product line, including devices and software. The affected products range from switches and routers to security appliances and wireless access points. Cisco recomme…
Researchers at Proofpoint and Cisco Talos have uncovered Chinese government-backed hacking campaigns targeting AI firms and government organizations across Asia.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical authentication bypass vulnerability (CVE-2026-76504, CVSS: 9.8) to its KEV list, impacting Cisco Catalyst SD-WAN Manager.
This article from Cisco Talos offers practical advice for cybersecurity professionals to frustrate adversaries throughout the attack chain. The article emphasizes a shift from reactive defenses to a more proactive approa…
The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges. The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWee…
A vulnerability, CVE-2026-76504, has been discovered in Cisco Catalyst SD-WAN software. This allows an attacker to bypass security policies. Users are advised to apply the security patch provided by Cisco.
A critical zero-day vulnerability (CVE-2026-76504) in Cisco SD-WAN Manager allows unauthenticated remote access to the API, potentially leading to compromise. Cisco has confirmed active exploitation of this flaw as of Se…
A China-nexus threat actor, UAT-11587, is targeting government and policy organizations across Asia, including Taiwan, India, the Philippines, and Cambodia, with a previously undocumented backdoor named ‘Antino’. The cam…
Cisco Talos is launching Executive Threat Detection (ETD), a new proactive service designed to protect executive accounts from sophisticated attacks that bypass standard endpoint detection and response (EDR) systems. The…
Nvidia has announced the Open Agent Safety Platform, a system combining open-source software (OpenShell) and hardware-based monitoring (Sentry) to enhance the security of AI agents. The platform is designed to address re…
This week’s cybersecurity news highlights a range of threats, including a Clop ransomware leak site takeover, a Docker botnet targeting AI API keys, and vulnerabilities impacting the water sector. Additionally, a Go impl…
Cisco Talos has released CAIRN, a new research toolkit designed to identify and track AI-integrated malware. CAIRN utilizes a metadata-first approach, focusing on identifying AI-related artifacts like API endpoints, tool…
Cisco has disclosed a critical zero-day vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that allows attackers to bypass authentication and gain unauthorized access to devices. This flaw, under active…