Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware

Security Affairs reports widespread exploitation of critical enterprise and browser vulnerabilities, including Cisco Secure Firewall Management Center authentication bypass CVE-2026-20079, SonicWall flaws, actively exploited Chrome V8 zero-day CVE-2026-87491, F5 BIG-IP APM compromise involving the PoisonedRefresh fileless rootkit, and additional vulnerabilities added to CISA’s Known Exploited Vulnerabilities catalog. Campaigns include credential theft, root access, Active Directory compromise, ransomware deployment, nation-state espionage, and memory-resident web-shell injection.