60
60
60
60
60
60
60
60
60
Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR
60
60
Week in review: KeePass vulnerability, Apple fixes exploited WebKit 0-days
60
60
60
60
Week in review: Windows zero-day exploited, Patch Tuesday forecast, selecting a compliance solution
60
60
60
60
Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023
60
60
60
60
60
Week in review: Veeam Backup & Replication RCE could soon be exploited, Microsoft fixes 4 0-days
60
60
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
Cisco warns actively exploited flaw CVE-2026-20349 lets unauthenticated attackers crash ASA and FTD firewalls via SSL VPN; CISA added it to KEV.
Cisco fixed CVE-2026-20349 (CVSS 8.6) in Secure Firewall ASA and FTD software, insufficient error checking in HTTP request processing that lets unauthenticated remote attackers force device reloads via crafted requests to the Remote Access SSL VPN service. Hotfixes cover ASA 9.16 through 9.24 and FTD 7.0 through 10.0, and there are no workarounds; Cisco confirmed active exploitation earlier in August but did not name the actor or targets. The flaw was found during internal security testing. CISA added it to the KEV catalog, requiring federal civilian agencies to patch by August 14, 2026.
72
60
Week in review: Microsoft, Apple patch exploited zero-days, tips for getting hired in cybersecurity
60
60
60
60
Week in review: Patched curl and libcurl vulnerability, 15 free M365 security training modules
60
60
60
Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited
Weekly roundup: Cisco FMC and N-able N-central zero-days exploited in the wild, MikroTik RouterOS hijacks, Microsoft Patch Tuesday ships two exploited zero-days.
State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass in Cisco Secure Firewall Management Center (FMC), alongside CVE-2026-20316. N-able issued an emergency hotfix for CVE-2026-86218, a critical pre-auth RCE in the N-central RMM platform exploited in the wild. CERT Polska disclosed six RouterOS vulnerabilities being chained to hijack internet-exposed MikroTik devices. Microsoft's September 2026 Patch Tuesday shipped a record patch count including two zero-days, while roughly 67,000 Trezor customers faced phishing after a shipping-partner breach and researchers privately disclosed a zero-click WeChat worm to Tencent.
70
60
Week in review: PoC for Splunk Enterprise RCE flaw released, scope of Okta breach widens
60
60
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast
60