Cisco News Articles

Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift.

3 days ago

New Cisco firewall zero-day exploited to crash SSL VPN devices

Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are exploiting to remotely crash vulnerable firewall devices.

3 days ago

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Hackers exploited CVE-2026-20127 to plant KeyDrift malware in Cisco SD-WAN systems, enabling encryption key collection and backdoor access.

3 days ago

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco has patched CVE-2026-76418, an unauthenticated DoS zero-day in ASA and FTD software that has been exploited in the wild. 

4 days ago

Exploited Cisco email gateway bug grants root access

Cisco says attackers are exploiting CVE-2026-76519, a 9.8 Secure Email Gateway flaw that grants root via a crafted attachment. Check File Reputation and patch now.

2 weeks ago

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco warns that hackers have been exploiting CVE-2026-76519, an arbitrary file write vulnerability in Secure Email Gateway.

3 weeks ago

Cisco patches new Secure Email Gateway zero-day exploited in attacks

Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges.

3 weeks ago

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV - SwapUpdate

Ravie LakshmananOct 01, 2026Vulnerability / Network Security

1 month ago

(TLP:CLEAR) Vulnerability Notification - Cisco SD-WAN Manager Actively Exploited - WaterISAC

ACTION MAY BE REQUIRED for utilities using Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage). Utilities that outsource technology support may need to consult their service providers for assistance with...

1 month ago

Cisco says no workaround for exploited SD-WAN Manager flaw

Key points Cisco warns attackers are actively exploiting a critical authentication bypass, tracked as CVE-2026-76504 with a CVSS score of 9.8, in its Catalyst SD-WAN Manager software. The flaw lets an...

1 month ago

Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges

1 month ago

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

Cisco confirms active exploitation of a Catalyst SD-WAN Manager authentication bypass that can grant unauthenticated attackers admin API access.

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) - IT Security News

2026-10-01 12:10 For the fifth time this year, Cisco revealed attackers have exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks. The vendor’s incident...

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) - Help Net Security

For the fifth time this year, Cisco revealed attackers exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks.

U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Cisco Catalyst SD-WAN Manager vulnerability to its Known Exploited Vulnerabilities catalog...

Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild

Cisco’s actively exploited CVE-2026-76504 flaw allows unauthenticated attackers to gain admin access to Catalyst SD-WAN Manager.

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

Cisco has patched CVE-2026-76504, an exploited zero-day authentication bypass vulnerability in Catalyst SD-WAN.

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager - SwapUpdate

Swati KhandelwalSep 30, 2026Vulnerability / Network Security

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers are exploiting CVE-2026-76504 to access Cisco SD-WAN Manager APIs as admin without credentials; fixed releases are available.

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges.

CVE, CVSS in Cybersecurity: Complete Guide

Explore CVE and CVSS in cybersecurity with NIST guidance and threat intelligence to assess vulnerability severity, risk, and remediation priorities

Week in review: Cisco patches exploited email gateway 0-day, Revolut breach - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What we know about the Revolut data breach so far

Cisco Zero-Day Highlights API Endpoint Authentication Issues

The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.

Attackers use SQL injection emails to root Cisco gateways

Key points Cisco warns attackers are exploiting a previously unknown flaw, CVE-2026-76461, rated 9.8 out of 10.0, to run arbitrary commands as root on Secure Email Gateway appliances. No login is required,...

Cisco Warns of Active Exploitation of Critical ISE Flaw

Cisco urged ISE customers to apply a software update, as well as check for signs of exploitation