Vulnerabilities
The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Cisco"
Network Security
Successful exploitation of the flaws could lead to code execution, server-side request forgery attacks, and denial-of-service conditions.
Artificial Intelligence
The acquisition strengthens Cisco’s push into identity-centric security for AI and machine access.
Artificial Intelligence
The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response.
Malware & Threats
The malware provides remote access and control of infected devices and maintains post-patching persistence.
Vulnerabilities
CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.
Vulnerabilities
The flaws can be exploited remotely to impersonate users or execute arbitrary commands on the underlying OS.
Vulnerabilities
The bugs could lead to authentication bypass, remote code execution, information disclosure, and privilege escalation.
Vulnerabilities
The high- and medium-severity flaws could lead to denial-of-service, secure boot bypass, information disclosure, and privilege escalation.
Ransomware
Amazon found evidence that the FMC software vulnerability has been exploited since late January, and found links to Russia.
Vulnerabilities
The security defects could lead to denial-of-service (DoS) conditions, command execution, or device takeover.
Vulnerabilities
WatchTowr reports seeing exploitation attempts for CVE-2026-20127 from numerous unique IP addresses.
Vulnerabilities
The networking giant has added the recently patched CVE-2026-20128 and CVE-2026-20122 to the list of exploited vulnerabilities.
Vulnerabilities
Cisco has rolled out patches for 48 vulnerabilities in Firewall ASA, Secure FMC, and Secure FTD products.
Malware & Threats
Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.
Vulnerabilities
The security defects can lead to DoS conditions, arbitrary command execution, and privilege escalation.
Vulnerabilities
Cisco has released patches for CVE-2026-20045, a critical vulnerability that can be exploited for unauthenticated remote code execution.
Vulnerabilities
UAT-9686 exploited the bug to deploy the AquaShell backdoor on Cisco appliances with certain ports open to the internet.
Malware & Threats
The critical zero-day is tracked as CVE-2025-20393 and it impacts Secure Email Gateway and Secure Email and Web Manager appliances.
Government
Federal agencies have reported as ‘patched’ ASA or FTD devices running software versions vulnerable to attacks.
M&A Tracker
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind.
Artificial Intelligence
Artificial Intelligence
Malware & Threats