Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Arctic Wolf

UPDATE: Active Exploitation CVE-2026-32996 of Veeam Agent

Sep 16, 2026 By Arctic Wolf In Arctic Wolf
On September 14, 2026, public technical details and proof-of-concept (PoC) exploit code were released for CVE-2026-32996, increasing the likelihood of exploitation attempts against affected Veeam Agent for Microsoft Windows deployments. CVE-2026-32996 is a local privilege escalation vulnerability in Veeam Agent for Microsoft Windows version 13.0.1.2067 and affects all earlier version 13 builds.
Read Post
When Broken Links Become Security Vulnerabilities

When Broken Links Become Security Vulnerabilities

Sep 16, 2026 By SecuritySenses In SecuritySenses
Imagine a link on your website stops working. You notice the problem, add it to your backlog, and move on. A few months later, the link starts working again. At first glance, that sounds like good news. In reality, it could mean that someone else now controls the destination. Fortunately, this is not what usually happens. In most cases, a broken link is simply a maintenance issue. A page has been moved, deleted, or renamed. Visitors encounter an error, someone eventually fixes the link, and the story ends there.
Read Post
astra

Chaining Vulnerabilities into Attack Vectors with Autonomous Pentesting

Sep 15, 2026 By Keshav Malik In Astra
Your vulnerability report is sorted by severity. The adversary looking at the same environment is sorted by path. That mismatch is the whole problem. Open any scanner output, and you get a tidy hierarchy: criticals at the top, then highs, then a long tail of mediums and lows that most teams will never touch. To the person who wrote the ticket, that tail is noise. To someone who thinks in chains, it’s a roadmap. A page of “lows” is not a page of things you can ignore.
Read Post
nucleus

How AI Changes Exposure Management: From Static Findings to Continuous Risk Decisions

Sep 15, 2026 By Rob Gibson In Nucleus
Every security team knows the feeling. The quarterly vulnerability scan completes. The report lands, with thousands of findings, color-coded by CVSS severity, neatly timestamped. And the moment it’s printed, it’s already out of date. That is the fundamental flaw at the heart of traditional exposure management: it is built around a point in time.
Read Post
cycognito

Emerging Threat: (CVE-2026-76461) Cisco Secure Email Gateway Root RCE via Email Parsing

Sep 15, 2026 By Igal Zeifman In CyCognito
CVE-2026-76461 is a SQL injection vulnerability in the email parsing logic of Cisco AsyncOS Software for Cisco Secure Email Gateway, caused by insufficient validation of message content before it reaches a database query. An attacker who sends a crafted email message containing SQL statements can have those statements executed by the appliance as it processes the message. The vulnerability carries a CVSS v3.1 base score of 9.8 (Critical).
Read Post
Arctic Wolf

CVE-2026-76461: Active Exploitation of Cisco Secure Email Gateway Critical Zero-Day Vulnerability Immediate Mitigation Required

Sep 15, 2026 By Arctic Wolf Labs In Arctic Wolf
CVE-2026-76461 is a pre-authentication SQL injection vulnerability in the email parsing logic of Cisco Secure Email Gateway (AsyncOS). This vulnerability enables unauthenticated remote threat actors to execute arbitrary code as root by sending crafted, malicious emails. This grants threat actors full control over the operating system, allowing data exfiltration, email surveillance, persistent access, and potential network pivoting, all without user interaction or credentials.
Read Post
sophos

Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation

Sep 15, 2026 By Sophos Counter Threat Unit Research Team In Sophos
On September 14, 2026, Cisco disclosed a vulnerability in Cisco Secure Email Gateway. CVE-2026-76461 is a critical (CVSS score of 9.8) SQL injection flaw in the email parsing functionality of Cisco AsyncOS Software. Successful exploitation “could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.” Cisco confirmed exploitation of the vulnerability in the wild, and the U.S.
Read Post
acronis

OT vulnerability management for Windows and Linux workstations

Sep 15, 2026 By Subramani Rao, In Acronis
OT vulnerability management for Windows and Linux workstations means discovering, assessing, prioritizing and remediating, or deliberately mitigating, software flaws on the general-purpose computers that run supervisory control, historian and engineering functions inside a plant, without disrupting the physical process those computers support. That definition already implies a second, separate layer: the PLCs, RTUs and field devices that this same approach cannot safely touch.
Read Post
cycognito

Emerging Threat: (CVE-2026-78006) The Events Calendar Remote Code Execution via PHP Object Injection

Sep 14, 2026 By Igal Zeifman In CyCognito
CVE-2026-78006 is a deserialization of untrusted data vulnerability (CWE-502) in The Events Calendar, a WordPress plugin published by StellarWP, that allows an attacker to achieve remote code execution on the underlying host. The flaw sits in the is_safe_widget_instance function, whose guard against unsafe object data can be bypassed.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.