Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
2026-10-15T01:24:00Z•924efd7ccb0799106ec256cf849b52b9dbd925594877cf4aee9c1c2d284d592c
CVE-2026-104935CVE-2026-74580AI securityAndroid banking trojanDocker HubIoT botnetsLinux kernelOAuth credential theftOT/ICSVPN appliancesactive exploitationauthentication bypasscloud securitycritical vulnerabilitiesdata privacyemail security gatewaysnpmphishing kitsprivilege escalationremote code executionroot accesssupply chain securityvirtualization escapezero-day
What happened
The feed reports multiple high-impact cybersecurity developments, including active exploitation of critical Cisco Secure Email Gateway and Ivanti Connect Secure vulnerabilities, root-level compromise of Linux hosts and virtualized environments, OAuth credential theft in SAP Cloud SDK, container registry and npm supply-chain weaknesses, Android banking malware, and large-scale phishing infrastructure. Several stories involve confirmed exploitation or severe pre-authentication compromise, requiring urgent patching and threat hunting. The document also includes emerging AI-enabled threats, data-,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 924efd7ccb0799106ec256cf849b52b9dbd925594877cf4aee9c1c2d284d592c
- Enrichment time
- 2026-10-15T01:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.