Cisco has released emergency security updates for CVE-2026-76460, a maximum-severity authentication bypass flaw in Cisco Identity Services Engine (ISE) and ISE-PIC that attackers are actively exploiting. The company and CISA urged immediate patching, with Cisco also advising admins to hunt for signs of compromise and re-image affected systems if suspicious activity is found. #CiscoISE #CVE-2026-76460 #CISA

Microsoft has shared a temporary workaround for a Windows 11 issue caused by the September 2026 security updates that blocks some users from signing in with valid domain credentials. The problem is tied to Machine Identity Isolation enforcement and can break domain trust on affected enterprise systems, especially outside Windows Server 2025 DFL environments. #Microsoft #Windows11 #MachineIdentityIsolation #KB5124008 #KB5124012

FamousSparrow has been using a new C++ backdoor called SparroWocky to spy on government organizations across Latin America, replacing its older SparrowDoor malware. ESET says the campaign has targeted multiple countries and appears aimed at gathering intelligence on how Latin American governments respond to U.S. pressure on Chinese economic interests. #FamousSparrow #SparroWocky #SparrowDoor #ESET

Cisco released urgent patches for a critical authentication bypass flaw in Identity Services Engine (ISE) and ISE-PIC, tracked as CVE-2026-76460, after confirming active zero-day exploitation. The vulnerability can let attackers bypass the management interface, gain root access, and hide evidence of compromise, prompting CISA to add it to the KEV catalog…

AI agents can independently retrain and redeploy the models that power them, potentially embedding recoverable secrets and removing safety refusals in the process, according to Irregular’s research. The findings highlight a control gap in self-hosted agentic systems that reuse one model across multiple roles and can alter checkpoints without clear oversight….

CISA has released new guidance on using cyber decoys to help critical infrastructure organizations detect, distract, and study adversaries who may already have some level of access. The guidance explains how decoys, honeypots, honeytokens, and related techniques can improve visibility into attacker behavior and strengthen detection and response. #CISA #ZeroTrust #honeytokens…

Kaspersky reported that three threat clusters—NightEagle, Hacking Cat, and Toy Ghouls—are targeting Russian enterprises with new persistence, lateral movement, ransomware, wiper, and backdoor capabilities. The campaigns use tools such as GhostContainer, Gorilla RAT, Monkey ransomware, ClearWater, Nemo Wiper, and Bird Agent to compromise Microsoft Exchange, Active Directory, and other enterprise systems….

A critical flaw in Issabel Framework, tracked as CVE-2026-89026, is being actively exploited to let unauthenticated attackers execute arbitrary OS commands by forging JWT bearer tokens with a hard-coded signing key. A patch released on August 1, 2026, replaces the shared key, while Shadowserver Foundation first observed exploitation on September 9,…

Ursula von der Leyen used her 2026 State of the European Union speech to warn that AI brings massive risks, including advanced hacking and self-improving systems, while arguing Europe should harness AI through the AI Act and human oversight. She also pushed a tougher stance on social media harms to children,…