Cisco Secure Email Gateway Zero-Day Exploited Again

Cisco Secure Email Gateway zero-day CVE-2026-76519: steel inspection box with an envelope in its slot and orange light leaking out

A Cisco Secure Email Gateway zero-day is under attack: one email with a crafted attachment lets an unauthenticated attacker write files and run commands as root. Cisco tracks it as CVE-2026-76519 (CVSS 9.8), and CISA added it to the Known Exploited Vulnerabilities catalog on October 14. It is the second Secure Email Gateway flaw exploited…

Read More

September 2026 Cybersecurity Roundup

September 2026 Cybersecurity Roundup: Berlin's Rhysida leak, Keio, Landsberg, 220M exposed travel records, plus 4 exploited CVEs.

This September 2026 Cybersecurity Roundup covers a month in which ransomware kept disrupting public services and critical infrastructure, while flaws in widely used network appliances created serious exposures of their own. Attacks hit German government and utility networks, and a misconfigured database exposed 220 million Vietnam-linked travel records. Below are the month’s key cyberattacks and…

Read More

Top 5 Cybersecurity News

Top 5 Cybersecurity News October 2, 2026: Cisco SD-WAN zero-day, WSO2 CVSS 10 auth bypass, Citrix backdoors persist, Apple CoreGraphics exploit, GUTcert breach.

This week’s Top 5 Cybersecurity News for October 2, 2026 follows a pattern that has been building across the year: attackers are targeting the layers that other infrastructure trusts. A critical-severity zero-day in Cisco’s SD-WAN Manager — the console that programs an entire enterprise WAN — arrived in CISA’s Known Exploited Vulnerabilities catalog on September…

Read More

Cisco ISE Authentication Bypass Vulnerability Hits Root

A Cisco ISE authentication bypass vulnerability (CVSS 10.0) lets attackers reach root with no credentials. Active exploitation confirmed. Patch now.

A Cisco ISE authentication bypass vulnerability tracked as CVE-2026-76460 carries a perfect CVSS score of 10.0 and is already under active exploitation. An unauthenticated attacker can bypass Cisco Identity Services Engine’s web-based management interface entirely and, per Cisco’s own advisory, reach command execution as root. That is the one system in your network built to…

Read More

Cisco Secure Email Gateway Vulnerability: Patch Now

A critical Cisco Secure Email Gateway vulnerability lets one crafted email grant root access, no login needed. Active exploitation confirmed.

A critical Cisco Secure Email Gateway vulnerability, CVE-2026-76461 (CVSS 9.8), lets an attacker gain root access to the appliance by sending a single crafted email, no login or admin access required. Cisco confirmed active exploitation and published its advisory September 14; CISA added the flaw to its Known Exploited Vulnerabilities catalog the same day, and…

Read More