Tag: Cisco
-
Five critical Cisco Nexus flaws could let attackers execute code with root privileges on affected data center switches. Cisco has released security updates to address the vulnerabilities in its NX-OS operating system. Attackers could also crash processes and trigger device reloads, disrupting network services even when attempts to execute code fail. However, exposure depends on…
-
Cisco has released patches for a Cisco SD-WAN zero-day that attackers are actively exploiting to gain administrator access. The critical vulnerability, CVE-2026-76504, affects Catalyst SD-WAN Manager and allows remote attackers to bypass authentication without existing credentials. Cisco confirmed that its security response team learned of exploitation in September 2026. Meanwhile, CISA has added the flaw…
-
Cisco has released urgent security updates for a maximum-severity vulnerability in Identity Services Engine. Attackers are already exploiting the Cisco ISE zero-day, while no workaround can protect vulnerable systems. Authentication Flaw Exposes Cisco ISE Systems Cisco tracks the vulnerability as CVE-2026-76460. It affects Cisco Identity Services Engine and the ISE Passive Identity Connector, regardless of…
-
Cisco has released patches for a critical Secure Email Gateway vulnerability that attackers have exploited as a zero-day. The flaw allows unauthenticated remote attackers to run commands with root privileges. The company urged customers to install the security updates immediately. Meanwhile, US federal agencies must patch affected systems by September 17. Attackers Exploit Cisco Email…
-
Cisco has confirmed that attackers are actively exploiting a Cisco Unified CM vulnerability that allows remote server-side request forgery (SSRF) attacks. The flaw, tracked as CVE-2026-20230, received patches in early June, but security researchers later observed attackers using public exploit techniques against vulnerable systems. The networking giant now urges organizations running Cisco Unified Communications Manager…
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to urgently patch Cisco CVE-2026-20230 after confirming that attackers are actively exploiting the vulnerability. CISA added the flaw to its Known Exploited Vulnerabilities (KEV) Catalog and instructed agencies covered by Binding Operational Directive (BOD) 26-04 to complete remediation by June 28. Cisco CVE-2026-20230…
-
Cisco has disclosed a critical vulnerability in SD-WAN Manager that attackers have already exploited in zero-day attacks to gain root-level access to affected systems. The company confirmed that threat actors targeted the flaw before a security update became available, increasing the urgency for organizations running vulnerable deployments. Tracked as CVE-2025-20337, the vulnerability affects Cisco SD-WAN…
-
A Cisco Salesforce breach claim has surfaced after a cybercriminal group alleged it accessed company data and is now attempting to extort payment. Cisco has not confirmed that a breach occurred. However, the claims appear alongside a wider pattern of attacks targeting Salesforce environments through social engineering. Hackers claim access to Salesforce data The group…
-
A supply chain attack led to a Cisco source code theft after attackers compromised a widely used security tool. Instead of targeting Cisco directly, the attackers moved through a trusted component inside the company’s development pipeline. As a result, they gained access to internal systems and extracted sensitive code. This incident shows how modern attacks…
-
Newly disclosed Cisco SD-WAN flaws are being actively exploited in cyberattacks targeting enterprise network infrastructure. Cisco confirmed that attackers are abusing vulnerabilities affecting its Catalyst SD-WAN Manager platform. The management system controls networking policies and traffic across distributed enterprise environments. A compromise of this system could expose entire corporate networks to attackers. Security teams are…