Cisco patched CVE-2026-76461, a critical zero-day in Secure Email Gateway actively exploited to run root commands without auth. CISA added it to KEV, and Cisco disclosed more critical flaws. #Cisco #CISA #KEV
@hendryadrian.bsky.social
@hendryadrian.bsky.social@hendryadrian.bsky.socialCisco warns of active exploitation of CVE-2026-76461, a critical zero-day in Secure Email Gateway appliances. A crafted email can grant root command execution. CISA added it to the KEV catalog. #Cisco #CVE202676461 #KEV
@netsecio.bsky.socialCISA adds 5 actively exploited flaws to KEV catalog affecting JFrog Artifactory, ConnectWise ScreenConnect & MikroTik RouterOS. Federal agencies must patch immediately. All orgs urged to act now! #CVE #PatchTuesday #CyberSecurity #KEV
🌐 cyber[.]netsecops[.]io
@ransomnews.online⚠️ CISA flags five exploited flaws
Active attacks target Artifactory, ScreenConnect and RouterOS, enabling admin takeover, code execution or router compromise.
🔗 read more: thehackernews.com/20...
@mel-echosphere.bsky.socialやることは単純だ。パッチ当てろ。LDAP bindは設定じゃなく資格情報だと思って切れ。アプライアンスのOSもホストとして観測しろ。
箱の外側だけ見てると、中でsecretsdumpが走ってても気づかねぇぜ。
https://x.com/DailyDarkWeb/status/2098961160674398418
#EdgeSecurity #KEV
@netsecio.bsky.socialCISA adds 5 actively exploited flaws to KEV catalog affecting JFrog Artifactory, ConnectWise ScreenConnect & MikroTik RouterOS. Federal agencies must patch immediately. All orgs urged to act now! #CVE #PatchTuesday #CyberSecurity #KEV
🌐 cyber[.]netsecops[.]io
@inferlume.bsky.socialUnauthenticated root on firewall manager. 0-day kit with 4 espionage customers. Admin tokens from anonymous POST. Passkey call that ends in your SharePoint. Read weekly wrap-up here: inferlume.com/reports/nigh...
#CyberThreatIntelligence #PatchTuesday #AISecurity #SupplyChainSecurity #KEV #Defence
@mel-echosphere.bsky.socialやることは単純だ。ホットフィックス当てろ。回避策はねぇ、と公式も書いてる。管理UIを外に晒すな。疑わしいならTACへ。パッチはこれからを防ぐだけで、既に踏まれてたら別だぜ。
https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks
#KEV #AuthN
@cyfar.ca~Cisa~
CISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.
-
IOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869
-
#CISA #KEV #ThreatIntel
@stemshop.bsky.social🔴 NetScaler CVE-2026-19490 under active attack
Critical CVSS 9.3 authentication bypass affecting NetScaler ADC & Gateway. Public PoC appeared Sept 2, attacks followed the next day, and CISA added it to KEV.
@cyberveille-ch.bsky.social📢 Rapport de vulnérabilités août 2026 : 103 CVE exploitées, l'IA en première ligne
Ce rapport mensuel agrège les données de cinq catalogues KEV (CISA, CIRCL, ENISA/EU CSIRTs, Shadowserver, Previdian) ainsi que les sightings issus de…
🟡 vérification factuelle moyenne
#KEV #Metasploit #Cyberveille
@adulau.infosec.exchange.ap.brid.gyThe @gcve BCP-07 KEV format has been updated to allow the `Withdrawn` and `Reasserted` KEV Assertions.
This allows to support case like CVE-2026-69836 .
🔗 https://gcve.eu/bcp/gcve-bcp-07/#withdrawn-and-reasserted-kev-assertions
@farehamfloristpod.bsky.socialI've snuck in an extra bonus episode tonight, where you'll be introduced to Kev and Stew.
Check it out wherever you listen to your podcasts. Look for Fareham Florist Pod.
@cyfar.ca~Cisa~
CISA added four actively exploited vulnerabilities to its KEV Catalog; prioritize rapid remediation.
-
IOCs: CVE-2026-75650, CVE-2026-81963, CVE-2026-85880
-
#CVE #KEV #ThreatIntel
@inferlume.bsky.social4th N central hotfix, MikroTrick SSH forges, & an open KEV stack just turned internet facing admin planes into the week’s easiest breach path.
Inferlume Report: inferlume.com/reports/dail...
#CTI #ThreatIntel #VulnerabilityManagement #MSP #InfoSec #IncidentResponse #Ncentral #MikroTik #CISA #KEV
@cyfar.ca~Cisa~
CISA added seven actively exploited vulnerabilities to its KEV Catalog and urges rapid remediation.
-
IOCs: CVE-2026-9586, CVE-2026-49869, CVE-2026-83549
-
#CVE #KEV #ThreatIntel
@securityonline.bsky.socialCISA added critical CISA KEV vulnerabilities to its list. Patch these CISA KEV vulnerabilities now to block ongoing cyberattacks.