VulnerabilitiesExploitedCVE-2026-20320CVSS 7.54 min read
Both bugs leak sensitive information rather than hand over code execution, and both have vendor fixes. Federal agencies have until November 24 to patch.
VulnerabilitiesExploitedCVE-2026-97229CVSS 10.01 min read
Rapid7's weekly wrapup lists a new module for the unauthenticated NetScaler bug that Citrix said was exploited before disclosure, alongside modules for Cisco Secure Email Gateway and GitLab.
Threat intelBrief1 min read
Cisco Talos describes a Windows infostealer that adds model-driven analysis to stolen credentials, sessions and other information collected from a victim.
VulnerabilitiesExploitedCVE-2026-97229CVSS 10.02 min read
The critical GitLab CE/EE bug lets an unauthenticated user run code on the server through a crafted regular expression in a CI/CD configuration. Federal agencies face a November 1 remediation deadline.
Threat intelBrief1 min read
Talos says attackers used a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware that copies site-to-site encryption keys. The vendor calls the attacks historical but gives no timeline.
Threat intelExploitedCVE-2026-20127CVSS 10.01 min read
Researchers say UAT-11473 used an authentication-bypass flaw Cisco patched in February 2026 to plant a framework that intercepts control-plane traffic and lifts keying material.
VulnerabilitiesExploitedCVE-2026-20349CVSS 8.62 min read
Cisco says attackers have been exploiting an unauthenticated denial-of-service bug in the Remote Access SSL VPN service of its Secure Firewall ASA and FTD software. Fixes are out, and no workarounds exist.
VulnerabilitiesExploitedCVE-2026-76418CVSS 8.62 min read
Cisco says it found evidence the flaw was exploited in the wild. Devices with the webvpn keyword and SSL VPN enabled on an interface are affected, and admins who can't patch yet have a mitigation.
Threat intelExploitedCVE-2026-20127CVSS 10.02 min read
Talos says UAT-11473 used a critical Cisco SD-WAN flaw to plant the KeyDrift framework on controllers. Lumen's Black Lotus Labs published research the same day on the Silent Train network.
Threat intelExploitedCVE-2025-8875CVSS 9.42 min read
Black Lotus Labs says the Chinese state-linked group chained compromised routers and modems to mask attacks on edge and management systems, then wiped its tooling after each operation.
VulnerabilitiesCVE-2026-76466CVSS 9.82 min read
Cisco's October round covers Expressway Series, IOS XR, Snort 3 and Unified Communications, plus a local privilege escalation in Secure Client's Secure Firewall Posture module.
