Zero-Days, AI Agents, and Massive Data Leaks Define the Week

Weekly summary of Cybersecurity Insider newsletters This article has been indexed from eSecurity Planet Read the original article: Zero-Days, AI…

Cisco patches a maximum-severity zero-day.

Gyazo data breach affects more than 23 million user records. China's FamousSparrow deploys a new backdoor.

CVE-2025-20224 | Cisco ASA/Firepower Threat Defense IKEv2 memory leak (cisco-sa-asa-ftd-ios-dos-DOESHWHy / Nessus ID 331355)

A vulnerability has been found in Cisco ASA and Firepower Threat Defense and classified as problematic.

Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges

A newly disclosed Windows zero-day affecting the Steam Client Service can reportedly let a standard local user obtain NT AUTHORITY\SYSTEM privileges…

Cisco patches max-severity ISE flaw, the second critical zero-day this week

Cisco released patches for an actively exploited authentication bypass vulnerability in its Cisco Identity Services Engine (ISE) platform, which is…

Cisco alerts customers to second actively exploited zero-day in as many days

Cisco disclosed its second actively exploited zero-day vulnerability in as many days, presenting its customers with back-to-back threats to address…

CISA Gives Agencies 3 Days to Patch Exploited Pixel Zero-Day

Google says a Pixel modem zero-day was under targeted exploitation. CISA has added CVE-2026-58704 to KEV as users are urged to patch.

Zero-Day wird ausgenutzt: Google rät Pixel-Usern dringend zum Update

Google hat eine als Zero-Day eingestufte Sicherheitslücke in Pixel-Smartphones geschlossen, die nach Angaben des Unternehmens bereits für einige…

Cisco hit by max severity zero-day exploit targeting Identity Services Engine, so it's time to patch up

Cisco fixed critical ISE flaw (CVE‑2026‑76460) allowing unauthenticated API authentication bypassActively exploited; no workarounds exist—patching is…

Cisco drops another exploited zero-day, this time a perfect 10

Cisco admins who have spent their week patching email gateways now face a perfect-10 Identity Services Engine flaw under active attack.

Cisco Warns of Critical ISE 0-Day Vulnerability Exploited in Attacks

Cisco has issued an urgent security advisory for a critical zero-day vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive…

Cisco warnt vor Zero-Day in ISE: Authentifizierung lässt sich umgehen (CVE-2026-76460)

LONDON (IT BOLTWISE) – Cisco meldet einen Zero-Day mit maximaler Kritikalität in Identity Services Engine (ISE), der bereits aktiv ausgenutzt wird.

Cisco warns of max severity ISE zero-day exploited in attacks

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in…

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exploitation.

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.

Hackers exploit zero-day flaw in Cisco email gateway

Researchers warn the vulnerability could be used by state-linked actors for espionage.

Google says some Pixel phone owners were hacked in zero-day attacks

The Pixel phone maker said there are indications that a bug in the phone's modem "may be under limited, targeted exploitation."

TP-Link Cameras 0-Day Vulnerabilities Allow Attackers to Spy on Users

TP-Link Tapo C200 smart cameras were affected by two zero-day vulnerabilities that could allow attackers on the same network to bypass authentication…

Pixel Modem Zero-Day Exploited in Targeted Attacks

Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.

Cisco Secure Email Gateway Zero-Day Exploited for Root Command Execution

Cisco Secure Email Gateway flaw CVE-2026-76461 is under active exploitation, with no workaround and urgent patching required for affected AsyncOS…

Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping

OPSWAT researchers find two zero-days in TP-Link cameras

Android 0-day Vulnerability on Google Pixel Devices Actively Exploited in Attacks

Google has confirmed that a high-severity Android zero-day flaw affecting its Pixel smartphones is being actively exploited in the wild, and it has…

Google patches Pixel modem zero-day exploited in targeted attacks

Google has fixed a high-severity Pixel modem vulnerability that may already have been exploited in limited, targeted attacks.

Pakistan Finalizes 90-Day Cybersecurity Action Plan, Federal CERT to Lead Rollout

Pakistan's federal government has completed work on a 90-day cybersecurity action plan designed to build a more coordinated national defense against…

September-Updates schließen 180 Sicherheitslücken in Android – Pixel Update stopft 0-Day-Lücke

Mit dem Android Security Bulletin für September 2026 dokumentiert Google die Schwachstellen des Mobilbetriebssystems, die dessen Entwickler in den…

September-Updates schließen 180 Sicherheitslücken in Android – Pixel Update stopft 0-Day-Lücke

Mit dem Android Security Bulletin für September 2026 dokumentiert Google die Schwachstellen des Mobilbetriebssystems, die dessen Entwickler in den…

Cisco zero-day goes straight to root, BambooToken branches into Linux, CenterPoint breach claim hits 7M+

Cisco zero-day goes straight to root BambooToken branches into Linux CenterPoint breach claim hits 7M+ Get the show notes here…

Google fixes actively exploited Android zero-day on Pixel devices

Google has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw…

Critical Cisco Secure Email Gateway zero-day gives attackers root access

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the…

Cisco warns customers of actively exploited zero-day in email gateways

Attackers of unknown origins and motivations are exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway, authorities and…

CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks

CISA has added a critical Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog, warning that attackers are…

What Zero-Day Response Should Be in the Post-Mythos Era

AI is shrinking the time between vulnerability disclosure and exploitation, leaving defenders less time to wait for patches or public exploits.

Cisco Email Gateway Zero-Day Actively Exploited

Cisco has disclosed that attackers are actively exploiting a zero-day SQL injection vulnerability in its Secure Email Gateway appliances.

Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day

Cisco warns of a critical zero-day in Secure Email Gateway, exploited in the wild to gain root access through malicious emails.

Version 1.0: Cisco Secure Email Gateway - Aktive Ausnutzung einer Zero-Day-Schwachstelle

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed…