Search: “Security Gateway”

13 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 241 Vulnerability 162 Ransomware 75 Malware 25 Threat actor 23 Data breach 23 Advisory 13 Policy & legal 6 Phishing & fraud 6 AI safety & security 4 Industry 3 Model release 1

SeverityAll critical 465 high 99 medium 14 low 0 info 4

Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026

Cisco's September 2026 hardening release for Secure Email Gateway and Secure Email and Web Manager patches internally found flaws, one actively exploited.

Cisco issued a security hardening release for Cisco Secure Email Gateway and Secure Email and Web Manager covering multiple internally discovered vulnerabilities, grouped by CWE class to streamline patching. Cisco states one of the vulnerabilities is known to be actively exploited. The exploited issue is the Cisco Secure Email Gateway SQL Injection Vulnerability detailed in a companion advisory. Software updates are available.

Cisco Security AdvisoriesSep 14, 16:00 UTC · 2d agoAdvisory in the wild6

Cisco security advisory (AV26-921)

Canadian Cyber Centre warns actively exploited Cisco Secure Email Gateway SQL injection CVE-2026-76461 was added to CISA's KEV database.

The Canadian Centre for Cyber Security advisory AV26-921 (September 14, 2026) covers a SQL injection vulnerability in Cisco Secure Email Gateway (AsyncOS) and Secure Email and Web Manager. Affected versions include AsyncOS/Secure Email Gateway prior to 15.5.5-014, 16.0.4-302, and 16.5.0-780, and Secure Email and Web Manager prior to 15.5.5-006 and 16.5.0-429. Cisco stated CVE-2026-76461 is being actively exploited, and CISA added it to the Known Exploited Vulnerabilities database the same day. Users and administrators are urged to apply updates as they become available.

Canadian Centre for Cyber Securityupdated Sep 16, 13:57 UTC · 21h agofirst Sep 14, 19:23 UTC · 2d agoAdvisory in the wild 17 sources CVE-2026-76461

Threat Advisory: Pulse Secure Connect Coverage

Cisco TalosApr 22, 13:50 UTC · Apr 22, 2021Advisory in the wildCVE-2021-22893 CVE-2019-11510 CVE-2020-8243+1 CVEs

CISA warns federal agencies of exploited Google Chrome and open

The RecordJan 3, 21:36 UTC · Jan 3, 2024Advisory in the wildCVE-2023-7101 CVE-2023-7024

Threat Advisory: SolarWinds supply chain attack

Cisco TalosDec 14, 22:20 UTC · Dec 14, 2020Advisory in the wild

CISA warns of latest Ivanti firewall bug being exploited by suspected Chinese hackers

The RecordApr 4, 21:26 UTC · Apr 4, 2025Advisory in the wildCVE-2025-22457 CVE-2025-0282 CVE-2023-46805+1 CVEs

Threat Advisory: HAFNIUM and Microsoft Exchange zero

Cisco TalosMar 4, 15:58 UTC · Mar 4, 2021Advisory in the wildCVE-2021-26855 CVE-2021-26857 CVE-2021-26858+5 CVEs1

CISA Warns of Active Exploitation Following FortiBleed Leak

Security AffairsJun 20, 08:27 UTC · Jun 20, 2026Advisory in the wild

CISA warns of attacks against Citrix NetScaler ADC and Gateway Devices

Security AffairsJul 21, 20:01 UTC · Jul 21, 2023Advisory in the wildCVE-2023-3519

Attackers still exploit Log4Shell on VMware Horizon servers, CISA warns

Help Net SecurityJun 24, 00:00 UTC · Jun 24, 2022Advisory in the wildCVE-2021-44228 CVE-2022-22954

7th September – Threat Intelligence Report

Check Point weekly bulletin: exploited SonicWall SMA 1000 zero-days (CVE-2026-83548/49), JFrog Artifactory auth bypass, and a 2.8M-patient Baylor Genetics breach.

Check Point's weekly bulletin covers breaches including Thomson Reuters' C-Track platform (court records across 11 US states and Canada), Baylor Genetics (2.8M patients and employees, SSNs included), Hit casinos in Slovenia, and Dropbox (~5,000 accounts via abused Lenovo email verification). SonicWall patched two exploited SMA 1000 zero-days, including CVE-2026-83548, a CVSS 10.0 pre-authentication SSRF, while JFrog fixed exploited authentication bypass CVE-2026-82329 (CVSS 9.8). Malware and actor coverage includes Gambling Goblin, JSCeal, Mirage Kitten's NodeRabbit/PollCat campaign, and DPRK Contagious Interview macOS activity, plus a FalconFlank privilege-escalation PoC against CrowdStrike Falcon.

Check Point ResearchSep 7, 14:54 UTC · 9d agoAdvisory in the wildCVE-2026-83548 CVE-2026-83549 CVE-2026-823291

Kaspersky Security Bulletin 2020

Kaspersky SecurelistMay 26, 10:00 UTC · May 26, 2021Advisory in the wildCVE-2020-1380 CVE-2020-0986 CVE-2021-26855+6 CVEs

CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting production

CISA, NSA, FBI and other agencies warn of active targeting of internet-exposed Siemens S7 PLCs and urge patching, exposure removal and hardening.

Joint advisory AA26-231A from the NSA, CISA, FBI, Department of Energy and EPA warns that actors are actively targeting Siemens S7 PLCs using internet scanning, AI-assisted scripts and libraries such as Snap7 and python-snap7 over S7comm on TCP port 102. The advisory covers S7-200 through S7-1500 series controllers and recommends patching, removing internet exposure, access controls, monitoring and disabling unneeded services. Siemens states no new S7 vulnerabilities are involved, only misconfigurations addressed in existing ProductCERT guidance SSB-104599. The article details how to apply each measure without breaking production dependencies such as remote I/O, HMI links and diagnostics.

CSO OnlineSep 8, 17:16 UTC · 8d agoAdvisory in the wild