CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

thehackernews.com Oct 1, 2026

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

Curated by Shubham · TechCapsules · Oct 1, 2026

AI-summarised brief · reviewed before publication

The U.S. Cybersecurity and Infrastructure Security Agency added the Cisco Catalyst SD‑WAN Manager authentication bypass flaw (CVE‑2026‑76504, CVSS 9.8) to its Known Exploited Vulnerabilities list after reports of active exploitation. The flaw allows an unauthenticated remote attacker to send a crafted HTTP request, bypassing authentication and gaining admin‑level access. Cisco confirmed the issue in September 2026 and released indicators of compromise for affected logs. Federal agencies must patch by October 3, 2026, and organizations are urged to upgrade immediately.

💡 Why It Matters

· The vulnerability exposes a critical entry point into enterprise‑wide network management, enabling attackers to control entire SD‑WAN infrastructures without credentials.
· Prompt remediation is essential to prevent widespread lateral movement and data exfiltration.

Capsules Cybersecurity

Read full article on thehackernews.com

Hackers stole millions of US military personnel records during months-long data breach

A months‑long breach of the Defense Manpower Data Center exposed personal data of approximately 2.8 million living U.S. military personnel and 300,000 deceased individuals. Hackers exploited an unencrypted file‑sharing system from October 2025 to mid‑July 2026, retrieving Social Security numbers, names, dates of birth, and service details. The Department of Defense confirmed the scale but has not identified the attackers or confirmed misuse. This incident follows recent federal data thefts, including the FBI breach attributed to ShinyHunters, underscoring persistent cybersecurity gaps in government systems.

💡 The loss of sensitive service‑member data heightens risks of identity theft and targeted surveillance, potentially compromising national security operations. It also pressures the Pentagon to overhaul its data protection protocols and reassess the resilience of its identity‑management infrastructure.

9to5mac.com · Oct 1

This fake Mac Zoom installer has a sneaky way to bypass Gatekeeper

Cybersecurity firm Jamf uncovered a counterfeit Zoom installer targeting macOS users. The malicious disk image masquerades as a legitimate Zoom setup, complete with an application icon and an alias to Applications. Its background image instructs users to bypass Gatekeeper by opening System Settings, selecting “Open Anyway,” and entering an administrator password. Once executed, the installer installs Zoom and an infostealer that exfiltrates data every eight seconds to the attacker’s server. The tactic exploits users’ willingness to follow seemingly normal installation steps.

💡 The attack demonstrates how attackers can manipulate familiar user interfaces to subvert macOS security, underscoring the need for vigilance when installing non‑notarized software.

businessworld.in · Oct 1

96% Indian Firms Hit By Disruptive Cyber Incidents: Cisco

A Cisco study found that 96 % of Indian organisations experienced a material, business‑disrupting cyber incident in the past year, with over one‑third involving AI‑enhanced attacks. The assessment gave Indian firms an average cyber‑defence score of 66 out of 100, slightly above the global 64, yet only 8 % reached the highest‑performing tier, matching the worldwide share. Security teams remain fragmented: just 40 % operate cohesively, 49 % struggle to present metrics that resonate with senior executives, and 44 % spend more time aggregating data than addressing threats. AI tools have boosted detection and response efficiency for more than 90 % of surveyed practitioners, but only 40 % of firms have deployed AI agents extensively, citing concerns over data exposure and third‑party risks.

💡 The findings expose a paradox where widespread AI adoption improves defenses, yet organisational silos and limited AI deployment leave Indian firms vulnerable to increasingly sophisticated attacks.

blog.barracuda.com · Oct 1

EvilTokens takedown shows why cybercrime platforms are getting harder to stop

Microsoft shut down the EvilTokens phishing-as-a-service platform after discovering it had compromised over 12,000 Microsoft 365 inboxes in more than 10,000 organizations worldwide. The service exploited device‑code phishing, abusing legitimate OAuth flows to bypass multi‑factor authentication. The takedown highlighted that cybercriminals can rapidly rebuild infrastructure using AI coding tools and inexpensive blockchain‑based services, making individual platform disruptions less effective. Coordinated, ecosystem‑wide action is now required to achieve lasting disruption.

💡 The incident demonstrates that cybercrime operations can outpace traditional law‑enforcement responses, underscoring the need for proactive, collaborative defenses that target the underlying tools and infrastructure rather than isolated services.

9to5mac.com · Sep 30

Elder fraud is rising – here’s how to protect your family

Elder fraud is escalating in the U.S., with 72% of 2024 cases driven by online exposure of seniors’ personal data, costing $4.2 billion. Scammers exploit family chat updates and SIM‑swap tactics to hijack phone numbers, intercept two‑factor authentication codes, and infiltrate encrypted messaging groups. They then use deep‑fake audio to impersonate relatives. Incogni offers data‑removal services, while experts recommend enabling app‑based 2FA, cross‑checking contacts through alternate channels, and establishing a secret family password.

💡 The rise of SIM‑swap scams shows that even end‑to‑end encrypted chats are vulnerable when attackers control the victim’s phone number. Protecting seniors now requires proactive data‑cleaning, stronger authentication, and multi‑channel verification.

all-about-industries.com · Sep 30

Cybersecurity as a Tool of Trade Policy

Geopolitical tensions have elevated cybersecurity to a central trade policy issue as the United States, China and Europe invoke security risks to justify technology restrictions. Ahead of a September 2026 summit between President Donald Trump and President Xi Jinping, the U.S. proposed a bilateral mechanism for sharing information on serious AI‑related security incidents, signaling that artificial‑intelligence threats now shape diplomatic and economic agendas. Recent cyber‑espionage campaigns illustrate the stakes: U.S. agencies disclosed the Volt Typhoon group’s five‑year infiltration of energy, water and telecom networks; a multinational warning in August 2025 linked Salt Typhoon to global telecom attacks; and a later NSA‑FBI report accused QTFY of targeting U.S. government and critical‑infrastructure sites, though some breach claims were later retracted. The convergence of AI, chip supply concerns and state‑backed hacking underscores a new era where cyber defenses drive trade negotiations.

💡 Nations are weaponising cyber‑risk assessments to reshape market access, turning digital vulnerability into a lever for economic leverage.