Passkey Phishing Hits Entra ID - MFA Persistence Chain
Passkey-themed social engineering compromises Entra ID with MFA persistence. Plus SPIFFE identity spoofing in K8s and Cisco FMC CVE-2026-20079 exploitation.
Posts tagged: Cisco
Cisco FMC CVSS 10 Exploit Live - CVE-2026-20079
CVE-2026-20079 Cisco FMC pre-auth RCE actively exploited with Sept 12 CISA deadline. WatchGuard Firebox in ransomware chains.
Chrome V8 Zero-Day CVE-2026-85046 - 6th of 2026
CVE-2026-85046 Chrome V8 type confusion exploited in the wild. Plus 12-year PostgreSQL backdoor CVE-2026-6471 and Cisco Nexus 9000 CVSS 9.8 RCE.
SonicWall SMA1000 Zero-Day Chain - CVE-2026-83548
CVE-2026-83548 CVSS 10 SonicWall SMA1000 chain exploited in the wild. BGP hijack poisons Virtualizor updates. 153M driver's licenses stolen.
Fire Ant Hijacks Cisco IOS XR Routers - CVE-2026-0768
Fire Ant APT targets Cisco IOS XR routers and TACACS+ servers. CVE-2026-0768 Langflow RCE and CVE-2026-82329 Artifactory bypass exploited in the wild.
Rails RCE KindaRails2Shell Exploited - Fire Ant Hits IOS XR
KindaRails2Shell Rails RCE actively exploited via file read chain. Fire Ant targets Cisco IOS XR and TACACS. Claude sessions hijacked by infostealers.
AI-Assisted Rootkits Arrive - UAT-10147 SPECTRE Campaign
Talos exposes AI-generated Linux rootkit in SPECTRE campaign. NSA confirms AI in OT attacks. Critical Cisco Crosswork and Citrix NetScaler auth bypasses.
Cisco ASA/FTD DoS Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls via unauthenticated HTTP. SharePoint CVE-2026-55040 exploited hours after PoC. Fortinet auth bypass patched.
Cisco ASA/FTD Zero-Day Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls remotely. Microsoft patches 398 flaws with one exploited zero-day. VMware vCenter CVSS 9.8 RCE now in the wild.
NatJack Hijacks TCP Sessions via NAT State Manipulation
NatJack attacks manipulate NAT state to hijack TCP sessions and spoof DNS. Plus Linux SCTP root exploit since 2008 and three Cisco SD-WAN CVSS 9.9 patches.