Security Bulletin

Attackers are abusing two remote monitoring and management (RMM) tools to evade detection in a campaign that has impacted over 80 organizations so far.

Shortly after the authentication-bypass flaw was disclosed multiple proof-of-concept exploits appeared, and one researcher claims there's been zero-day activity for at least a month.

A practical DevNet lab for connecting a public OpenAI-compatible target to Cisco AI Defense Explorer, running a Quick Scan, and reviewing AI red team findings.

Summary

Service Providers that aren’t actively evolving their network to support next-generation technologies like AI won’t just provide poor network experiences; their networks will be overwhelmed by traffic volumes and customer performance demands.

More than 1,600 socially engineered messages from the China-backed advanced persistent threat (APT) group target various sectors to deliver the previously undocumented ABCDoor backdoor, ValleyRAT, and other malware.

This week, I will release a few updates to our DShield honeypot. The update should happen automatically if you have "automatic updates" enabled on your system. There will be two major changes:

At Cisco, we see resilience as the ability to turn disruption into growth and innovation. Whether it’s responding to a crisis, building AI skills, or investing in nonprofit partners, our goal is to make people and places stronger for the future.

This May the 4th, we’re bringing Galaxy Mode to the Cisco AI Assistant. Troubleshoot network issues, create workflows, and more with an engaging, limited-time experience.

Cisco announces its intent to acquire Astrix Security, extending Zero Trust to the agentic workforce to secure non-human identities and AI agents in the modern enterprise.

Megjelent a SANS és a Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet közös kiadványának 2026. májusi száma, melyben a jelmondatokkal foglalkozunk. Bemutatjuk, hogy a gyenge vagy újrahasznált jelszavak komoly biztonsági kockázatot...

Learn how Cisco’s FedRAMP-authorized solutions help federal agencies meet the new CISA BOD 26-02 requirements by effectively mitigating the security risks associated with End-of-Support edge devices.