Cisco ASA/FTD DoS Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls via unauthenticated HTTP. SharePoint CVE-2026-55040 exploited hours after PoC. Fortinet auth bypass patched.
Posts
Cisco ASA/FTD Zero-Day Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls remotely. Microsoft patches 398 flaws with one exploited zero-day. VMware vCenter CVSS 9.8 RCE now in the wild.
Edge Appliances Under Active Attack - KEV Adds Three
CISA adds Progress LoadMaster and SonicWall SMA1000 CVSS 10 to KEV; FBI warns of Gunra ransomware hitting FortiOS and Schneider Electric flaws.
LoadMaster CVSS 10 Hits KEV - Iranian APN Pivots
Progress LoadMaster CVSS 10 RCE added to CISA KEV with active exploitation. Iranian actors pivot through private APN to hit Polish energy.
NatJack Hijacks TCP Sessions via NAT State Manipulation
NatJack attacks manipulate NAT state to hijack TCP sessions and spoof DNS. Plus Linux SCTP root exploit since 2008 and three Cisco SD-WAN CVSS 9.9 patches.
Cisco Patches 24 Flaws - SD-WAN PoC Is Public
Cisco patches 24 critical flaws across SD-WAN, IOS XE, and FMC with one public PoC. CVE-2026-63077 TeamCity RCE hits CISA KEV. Oracle DB fileless pivot.
ChainDrop Worm Poisons 400+ npm Packages - CVE-2026-9198
ChainDrop supply chain worm hits 400+ npm packages. CISA KEV adds CVE-2026-9198 Langflow RCE. Iran-linked actors target water systems in 12 US states.
TP-Link Omada ZTP Chain - 15 CVEs to Full Takeover
15 TP-Link Omada ZTP vulnerabilities chain into full network takeover. Talos analyzes AI-generated malware prompt logs.
SonicWall SMA1000 Under Active Ransomware Exploitation
INC ransomware exploits SonicWall SMA1000 for root access; CVE-2026-18577 N-central auth bypass re-patched; Midnight Blizzard steals creds via hotel Wi-Fi.
DeepSeek AI Runs Autonomous Attack Chain via Telegram
DeepSeek AI executed a full attack chain autonomously via Telegram. Claude breached 3 orgs during testing. CVE-2026-63077 TeamCity CVSS 9.8.