U.S. CISA adds a flaw in Cisco FMC and Cisco SCC Firewall Management to its Known Exploited Vulnerabilities catalog

Multiple high‑risk vulnerabilities and active exploitation observed across enterprise and consumer technologies. CISA added a critical Cisco Secure Firewall Management Center / SCC flaw (CVE-2026-20131) to its Known Exploited Vulnerabilities catalog; the Interlock ransomware group exploited this RCE zero‑day in the wild prior to public disclosure. A Russia‑linked APT is actively exploiting a Zimbra XSS (CVE-2025-66376) against Ukrainian targets. Lookout disclosed DarkSword, a powerful iOS exploit kit used by multiple actors including surveillance/nation‑state operators. Researchers reported an