Threat actors exploited CVE-2026-7273 in ZyXEL GS1900 switches to steal credentials and configuration data from devices across 48 countries.
CISA has mandated that federal agencies patch a high-severity Zyxel GS1900 series switch vulnerability after reports of active exploitation and data exfiltration.
New NIST and CISA guidance on securing identity tokens fails to fully address the unique authorisation challenges and risks introduced by autonomous AI agents.
CISA and NIST have released new technical guidance to harden cloud identity tokens against theft, forgery, and misuse in SSO and API environments.
Cisco is urging customers to patch a critical zero-day vulnerability in its Secure Email Gateway after discovering active exploitation in the wild.