ENISA 2026: cyber dependencies expand the attack surface. One compromised supplier can reach many organisations. What it means under NIS2 and where to start.
🇬🇧 diesec.com/2026/10/enis...
🇩🇪 diesec.com/de/2026/10/c...
#Cybersecurity #ENISA #DIESEC

5 attacked layers — all ones other infrastructure trusts.
Cisco SD-WAN 9.8 · WSO2 JWT bypass 10.0 · Citrix backdoors survive patching · Apple iOS zero-day #7 · German KRITIS cert breach, 640 GB
🇬🇧 diesec.com/2026/10/top-...
🇩🇪 diesec.com/de/2026/10/t...
#Cybersecurity #DIESEC

"SalesBleed": poisoned Salesforce lead form hijacked Agentforce AI agents, zero-click CRM theft, no login needed. Patched by Aug 19, disclosed by Zenity Labs. 4th AI agent hijack of 2026, same root cause.
🇬🇧 diesec.com/2026/09/sale...
🇩🇪 diesec.com/de/2026/09/s...
#cybersecurity #diesec

CVE-2026-59822 (CVSS 8.8): LiteLLM MCP proxy lets attackers skip OAuth2 login entirely, no credentials needed. First MCP flaw in CISA KEV. Exploited since Sep 1. Upgrade to v1.84.0+. Federal deadline: today.
diesec.com/2026/09/lite...
diesec.com/de/2026/09/l...
#cybersecurity #diesec #LiteLLM

New Windows Defender exploit "ShieldCrash" grants SYSTEM access on FULLY PATCHED systems, bypasses the fix Microsoft shipped days ago. No CVE, no patch yet. 5th Defender EoP bug from this researcher in 2026.
🇬🇧 diesec.com/2026/09/wind...
🇩🇪 diesec.com/de/2026/09/w...
#ZeroDay #cybersecurity #diesec

974 CVEs. Two zero-days in the wild. One release.
TerminalFix hit Berlin's Senate before awareness training caught up.
4 espionage clusters shared the same Chrome+Windows exploit kit.

🇬🇧 diesec.com/2026/09/top-...
🇩🇪 diesec.com/de/2026/09/t...  

#Cybersecurity #DIESEC