IT Security Nachrichten IT Security News

Zero-Days, AI Agents, and Massive Data Leaks Define the Week

Weekly summary of Cybersecurity Insider newsletters This article has been indexed from eSecurity Planet Read the original article: Zero-Days, AI…

Sicherheitslücken (CVE) The CyberWire

Cisco patches a maximum-severity zero-day.

Gyazo data breach affects more than 23 million user records. China's FamousSparrow deploys a new backdoor.

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-20224 | Cisco ASA/Firepower Threat Defense IKEv2 memory leak (cisco-sa-asa-ftd-ios-dos-DOESHWHy / Nessus ID 331355)

A vulnerability has been found in Cisco ASA and Firepower Threat Defense and classified as problematic.

Sicherheitslücken (CVE) Cyber Security News

Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges

A newly disclosed Windows zero-day affecting the Steam Client Service can reportedly let a standard local user obtain NT AUTHORITY\SYSTEM privileges…

Sicherheitslücken (CVE) CSO Online

Cisco patches max-severity ISE flaw, the second critical zero-day this week

Cisco released patches for an actively exploited authentication bypass vulnerability in its Cisco Identity Services Engine (ISE) platform, which is…

Sicherheitslücken (CVE) CyberScoop

Cisco alerts customers to second actively exploited zero-day in as many days

Cisco disclosed its second actively exploited zero-day vulnerability in as many days, presenting its customers with back-to-back threats to address…

Sicherheitslücken (CVE) TechRepublic

CISA Gives Agencies 3 Days to Patch Exploited Pixel Zero-Day

Google says a Pixel modem zero-day was under targeted exploitation. CISA has added CVE-2026-58704 to KEV as users are urged to patch.

Sicherheitslücken (CVE) WinFuture News

Zero-Day wird ausgenutzt: Google rät Pixel-Usern dringend zum Update

Google hat eine als Zero-Day eingestufte Sicherheitslücke in Pixel-Smartphones geschlossen, die nach Angaben des Unternehmens bereits für einige…

Sicherheitslücken (CVE) Latest from TechRadar

Cisco hit by max severity zero-day exploit targeting Identity Services Engine, so it's time to patch up

Cisco fixed critical ISE flaw (CVE‑2026‑76460) allowing unauthenticated API authentication bypassActively exploited; no workarounds exist—patching is…

Sicherheitslücken (CVE) theregister.com

Cisco drops another exploited zero-day, this time a perfect 10

Cisco admins who have spent their week patching email gateways now face a perfect-10 Identity Services Engine flaw under active attack.

Sicherheitslücken (CVE) Cyber Security News

Cisco Warns of Critical ISE 0-Day Vulnerability Exploited in Attacks

Cisco has issued an urgent security advisory for a critical zero-day vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive…

Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

Cisco warnt vor Zero-Day in ISE: Authentifizierung lässt sich umgehen (CVE-2026-76460)

LONDON (IT BOLTWISE) – Cisco meldet einen Zero-Day mit maximaler Kritikalität in Identity Services Engine (ISE), der bereits aktiv ausgenutzt wird.

Sicherheitslücken (CVE) BleepingComputer

Cisco warns of max severity ISE zero-day exploited in attacks

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in…

Sicherheitslücken (CVE) The Hacker News

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exploitation.

Sicherheitslücken (CVE) SecurityWeek

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.

Sicherheitslücken (CVE) Cybersecurity Dive

Hackers exploit zero-day flaw in Cisco email gateway

Researchers warn the vulnerability could be used by state-linked actors for espionage.

Sicherheitslücken (CVE) TechCrunch

Google says some Pixel phone owners were hacked in zero-day attacks

The Pixel phone maker said there are indications that a bug in the phone's modem "may be under limited, targeted exploitation."

Sicherheitslücken (CVE) Cyber Security News

TP-Link Cameras 0-Day Vulnerabilities Allow Attackers to Spy on Users

TP-Link Tapo C200 smart cameras were affected by two zero-day vulnerabilities that could allow attackers on the same network to bypass authentication…

Sicherheitslücken (CVE) SecurityWeek

Pixel Modem Zero-Day Exploited in Targeted Attacks

Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.

Sicherheitslücken (CVE) IT Security News

Cisco Secure Email Gateway Zero-Day Exploited for Root Command Execution

Cisco Secure Email Gateway flaw CVE-2026-76461 is under active exploitation, with no workaround and urgent patching required for affected AsyncOS…

Sicherheitslücken (CVE) infosecurity-magazine.com

Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping

OPSWAT researchers find two zero-days in TP-Link cameras

Sicherheitslücken (CVE) Cyber Security News

Android 0-day Vulnerability on Google Pixel Devices Actively Exploited in Attacks

Google has confirmed that a high-severity Android zero-day flaw affecting its Pixel smartphones is being actively exploited in the wild, and it has…

Sicherheitslücken (CVE) CyberInsider

Google patches Pixel modem zero-day exploited in targeted attacks

Google has fixed a high-severity Pixel modem vulnerability that may already have been exploited in limited, targeted attacks.

IT Security Nachrichten The Cyber Express

Pakistan Finalizes 90-Day Cybersecurity Action Plan, Federal CERT to Lead Rollout

Pakistan's federal government has completed work on a 90-day cybersecurity action plan designed to build a more coordinated national defense against…

IT Nachrichten PC-WELT

September-Updates schließen 180 Sicherheitslücken in Android – Pixel Update stopft 0-Day-Lücke

Mit dem Android Security Bulletin für September 2026 dokumentiert Google die Schwachstellen des Mobilbetriebssystems, die dessen Entwickler in den…

Windows Tipps & Security PC-WELT

September-Updates schließen 180 Sicherheitslücken in Android – Pixel Update stopft 0-Day-Lücke

Mit dem Android Security Bulletin für September 2026 dokumentiert Google die Schwachstellen des Mobilbetriebssystems, die dessen Entwickler in den…

Sicherheitslücken (CVE) IT Security News

Cisco zero-day goes straight to root, BambooToken branches into Linux, CenterPoint breach claim hits 7M+

Cisco zero-day goes straight to root BambooToken branches into Linux CenterPoint breach claim hits 7M+ Get the show notes here…

Sicherheitslücken (CVE) BleepingComputer

Google fixes actively exploited Android zero-day on Pixel devices

Google has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw…

Sicherheitslücken (CVE) Network World

Critical Cisco Secure Email Gateway zero-day gives attackers root access

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the…

Sicherheitslücken (CVE) CyberScoop

Cisco warns customers of actively exploited zero-day in email gateways

Attackers of unknown origins and motivations are exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway, authorities and…

Sicherheitslücken (CVE) Cyber Security News

CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks

CISA has added a critical Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog, warning that attackers are…

Sicherheitslücken (CVE) BleepingComputer

What Zero-Day Response Should Be in the Post-Mythos Era

AI is shrinking the time between vulnerability disclosure and exploitation, leaving defenders less time to wait for patches or public exploits.

Sicherheitslücken (CVE) IT Security News

Cisco Email Gateway Zero-Day Actively Exploited

Cisco has disclosed that attackers are actively exploiting a zero-day SQL injection vulnerability in its Secure Email Gateway appliances.

Sicherheitslücken (CVE) Security Affairs

Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day

Cisco warns of a critical zero-day in Secure Email Gateway, exploited in the wild to gain root access through malicious emails.

Sicherheitslücken (CVE) BSI RSS-Newsfeed BSI-IT-Sic…

Version 1.0: Cisco Secure Email Gateway - Aktive Ausnutzung einer Zero-Day-Schwachstelle

Sicherheitslücken (CVE) Help Net Security

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed…