5 attacked layers — all ones other infrastructure trusts.
Cisco SD-WAN 9.8 · WSO2 JWT bypass 10.0 · Citrix backdoors survive patching · Apple iOS zero-day #7 · German KRITIS cert breach, 640 GB
🇬🇧 diesec.com/2026/10/top-...
🇩🇪 diesec.com/de/2026/10/t...
#Cybersecurity #DIESEC

"SalesBleed": poisoned Salesforce lead form hijacked Agentforce AI agents, zero-click CRM theft, no login needed. Patched by Aug 19, disclosed by Zenity Labs. 4th AI agent hijack of 2026, same root cause.
🇬🇧 diesec.com/2026/09/sale...
🇩🇪 diesec.com/de/2026/09/s...
#cybersecurity #diesec

CVE-2026-59822 (CVSS 8.8): LiteLLM MCP proxy lets attackers skip OAuth2 login entirely, no credentials needed. First MCP flaw in CISA KEV. Exploited since Sep 1. Upgrade to v1.84.0+. Federal deadline: today.
diesec.com/2026/09/lite...
diesec.com/de/2026/09/l...
#cybersecurity #diesec #LiteLLM

New Windows Defender exploit "ShieldCrash" grants SYSTEM access on FULLY PATCHED systems, bypasses the fix Microsoft shipped days ago. No CVE, no patch yet. 5th Defender EoP bug from this researcher in 2026.
🇬🇧 diesec.com/2026/09/wind...
🇩🇪 diesec.com/de/2026/09/w...
#ZeroDay #cybersecurity #diesec

974 CVEs. Two zero-days in the wild. One release.
TerminalFix hit Berlin's Senate before awareness training caught up.
4 espionage clusters shared the same Chrome+Windows exploit kit.

🇬🇧 diesec.com/2026/09/top-...
🇩🇪 diesec.com/de/2026/09/t...  

#Cybersecurity #DIESEC