IT Security Nachrichten Help Net Security

Week in review: Cisco patches exploited email gateway 0-day, Revolut breach

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What we know about the Revolut data breach so far…

Sicherheitslücken (CVE) darkreading

Cisco Zero-Day Highlights API Endpoint Authentication Issues

The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.

Sicherheitslücken (CVE) The CyberWire

Cisco patches a maximum-severity zero-day.

Gyazo data breach affects more than 23 million user records. China's FamousSparrow deploys a new backdoor.

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-20224 | Cisco ASA/Firepower Threat Defense IKEv2 memory leak (cisco-sa-asa-ftd-ios-dos-DOESHWHy / Nessus ID 331355)

A vulnerability has been found in Cisco ASA and Firepower Threat Defense and classified as problematic.

Sicherheitslücken (CVE) CSO Online

Cisco patches max-severity ISE flaw, the second critical zero-day this week

Cisco released patches for an actively exploited authentication bypass vulnerability in its Cisco Identity Services Engine (ISE) platform, which is…

Sicherheitslücken (CVE) CyberScoop

Cisco alerts customers to second actively exploited zero-day in as many days

Cisco disclosed its second actively exploited zero-day vulnerability in as many days, presenting its customers with back-to-back threats to address…

Sicherheitslücken (CVE) Latest from TechRadar

Cisco hit by max severity zero-day exploit targeting Identity Services Engine, so it's time to patch up

Cisco fixed critical ISE flaw (CVE‑2026‑76460) allowing unauthenticated API authentication bypassActively exploited; no workarounds exist—patching is…

Sicherheitslücken (CVE) theregister.com

Cisco drops another exploited zero-day, this time a perfect 10

Cisco admins who have spent their week patching email gateways now face a perfect-10 Identity Services Engine flaw under active attack.

Sicherheitslücken (CVE) Cyber Security News

Cisco Warns of Critical ISE 0-Day Vulnerability Exploited in Attacks

Cisco has issued an urgent security advisory for a critical zero-day vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive…

Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

Cisco warnt vor Zero-Day in ISE: Authentifizierung lässt sich umgehen (CVE-2026-76460)

LONDON (IT BOLTWISE) – Cisco meldet einen Zero-Day mit maximaler Kritikalität in Identity Services Engine (ISE), der bereits aktiv ausgenutzt wird.

Sicherheitslücken (CVE) BleepingComputer

Cisco warns of max severity ISE zero-day exploited in attacks

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in…

Sicherheitslücken (CVE) The Hacker News

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exploitation.

Sicherheitslücken (CVE) SecurityWeek

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.

Sicherheitslücken (CVE) Cybersecurity Dive

Hackers exploit zero-day flaw in Cisco email gateway

Researchers warn the vulnerability could be used by state-linked actors for espionage.

Sicherheitslücken (CVE) IT Security News

Cisco Secure Email Gateway Zero-Day Exploited for Root Command Execution

Cisco Secure Email Gateway flaw CVE-2026-76461 is under active exploitation, with no workaround and urgent patching required for affected AsyncOS…

Sicherheitslücken (CVE) IT Security News

Cisco zero-day goes straight to root, BambooToken branches into Linux, CenterPoint breach claim hits 7M+

Cisco zero-day goes straight to root BambooToken branches into Linux CenterPoint breach claim hits 7M+ Get the show notes here…

Sicherheitslücken (CVE) Network World

Critical Cisco Secure Email Gateway zero-day gives attackers root access

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the…

Sicherheitslücken (CVE) CyberScoop

Cisco warns customers of actively exploited zero-day in email gateways

Attackers of unknown origins and motivations are exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway, authorities and…

Sicherheitslücken (CVE) Cyber Security News

CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks

CISA has added a critical Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog, warning that attackers are…

Sicherheitslücken (CVE) IT Security News

Cisco Email Gateway Zero-Day Actively Exploited

Cisco has disclosed that attackers are actively exploiting a zero-day SQL injection vulnerability in its Secure Email Gateway appliances.

Sicherheitslücken (CVE) Security Affairs

Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day

Cisco warns of a critical zero-day in Secure Email Gateway, exploited in the wild to gain root access through malicious emails.

Sicherheitslücken (CVE) BSI RSS-Newsfeed BSI-IT-Sic…

Version 1.0: Cisco Secure Email Gateway - Aktive Ausnutzung einer Zero-Day-Schwachstelle

Sicherheitslücken (CVE) Help Net Security

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed…

Sicherheitslücken (CVE) IT Security News

Cisco Secure Email Gateway 0-day Vulnerability Actively Exploited in the Wild to Run Malicious Code

Cisco has issued an urgent warning regarding an actively exploited zero-day vulnerability in its Secure Email Gateway appliances that allows remote…

Sicherheitslücken (CVE) BleepingComputer

Cisco patches Secure Email Gateway zero-day exploited in attacks

Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. [...]

Sicherheitslücken (CVE) SecurityWeek

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.