ConciseSignal

Cisco warns of actively exploited email gateway flaw

Cisco has confirmed a critical vulnerability in its Secure Email Gateway is being exploited. The flaw, identified as CVE-2026-76461, allows remote attackers to run commands with root privileges by sending crafted emails. The issue affects both physical and virtual gateway devices running certain versions of AsyncOS, but not other Cisco products. Cisco has released patches and urged users to upgrade, as there are no workarounds.

Why it mattersThe vulnerability grants attackers deep access to affected systems, raising the risk of data theft or system compromise. U.S. agencies have been ordered to patch immediately, signaling the threat's seriousness.

Sources covering this

SecurityWeekHeadline onlyRoot RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation5:18 AMThe Hacker NewsCisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution6:11 AM

In this story

Cisco
Concise Signal DailyEverything that mattered, every weekday at 7am.

More in Cybersecurity

14 sources · 6d ago

Microsoft releases record number of security patches

Microsoft released updates to fix at least 974 security vulnerabilities across Windows and other products, its largest patch release to date. The update includes critical flaws, some already being exploited, and over 100 rated as dangers that could let attackers seize control of systems. The unprecedented volume is partly due to the use of AI for vulnerability detection, but experts warn that rapid growth complicates efforts to test and deploy fixes.

7 sources · 8d ago

OpenAI pledges $1 billion for AI cyber defense program

OpenAI has pledged $1 billion in credits to help organizations defending critical U.S. infrastructure—including water utilities, electric grids, local governments, banks, and nonprofits—access its AI-powered cybersecurity tools, training, and support. The "Daybreak for Frontline Defenders" initiative aims to help these sectors strengthen their defenses as AI-driven cyberattacks become more advanced. OpenAI says it will expand the program to partner countries in the coming weeks.

8 sources · 4d ago

GitLab patches critical file-read issue as attacks begin

GitLab has fixed a severe vulnerability that allowed unauthenticated users to read sensitive files from its servers. Researchers report probing of the flaw started within hours of the disclosure. The bug affects several recent GitLab versions and potentially exposes secrets, credentials, and configuration data. A separate critical issue was also patched. Organizations are urged to apply the updates immediately or restrict public access.

9 sources · 7d ago

Liquid Network exploit creates $320 million in unbacked bitcoin

Attackers exploited a software bug in Blockstream's Liquid Network, a Bitcoin sidechain, creating about 4,000 unbacked Liquid Bitcoin (L-BTC) and withdrawing $320 million. The attackers identified themselves as white hat hackers and have returned most funds, retaining around $47 million. According to Blockstream, the incident did not involve compromised multisig keys but was caused by a vulnerability in recent node software.