The Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities list to include high-severity flaws impacting Microsoft SharePoint and the Synacor Zimbra Collaboration Suite, Security Affairs reports.
Multiple nation-state threat operations and commercial spyware vendors have leveraged the new DarkSword iOS exploit kit, which features half a dozen vulnerabilities reported by iVerify to impact nearly 300 million iPhones, in attacks over the last five months, according to SecurityWeek.
Attacks exploiting the maximum severity insecure deserialization zero-day vulnerability in Cisco Secure Firewall Management Center software, tracked as CVE-2026-20131, have been launched by the Interlock ransomware gang since Jan. 26, or over a month before the flaw's public disclosure, The Hacker News reports.
The vulnerability arises from the interaction between snap-confine, which manages secure application environments, and systemd-tmpfiles, responsible for removing temporary files.
The vulnerabilities, discovered by Eclypsium across four different products including GL-iNet Comet RM-1, Angeet/Yeeso ES3 KVM, Sipeed NanoKVM, and JetKVM, enable unauthenticated actors to achieve root access or execute malicious code.
AI agent development and deployment platform LangSmith and high-performance large language model serving framework SGLang have been impacted by vulnerabilities that could allow attackers to take over accounts and run code remotely, respectively, according to The Hacker News.
Cybersecurity Dive reports that organizations' security teams may be disregarding remediation of the high-severity Cisco Catalyst SD-WAN vulnerability, tracked as CVE-2026-20133, after warnings that only emphasized the targeting of the zero-day, tracked as CVE-2026-20127.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
