CYBER THREATCAST

Patch Cisco Secure Email Gateway physical and virtual appliances to a fixed AsyncOS release immediately and complete remediation by CISA’s September 17, 2026 deadline. Attackers are actively exploiting CVE-2026-76461, and a crafted email can give an unauthenticated attacker root command execution.

Install Google’s September 2026 Pixel update on every supported Pixel phone, prioritizing users at elevated risk of targeted attack; federal agencies must patch by September 19. CVE-2026-58704 is under limited, targeted exploitation and allows a nearby attacker to escalate privileges through the cellular modem without user interaction.

Update affected Acronis Backup components to version 1.9.3 HF3 or 1.8.11 immediately, then investigate vulnerable Linux hosts for unauthorized accounts, web shells, suspicious SSH access, modified files, scheduled tasks, and unusual processes. Acronis observed limited, targeted exploitation of CVE-2026-87886 against its cPanel, WHM, and Plesk backup components.

Patch Dahua cameras, replace unsupported models, change their credentials, and isolate them from corporate and critical systems. CameraSwarm includes more than 14,000 compromised Dahua cameras, and attackers are using hijacked devices for surveillance, DDoS activity, and footholds into organizational networks.

Upgrade The Events Calendar WordPress plugin to version 6.17.4.1 or later. CVE-2026-78006 and CVE-2026-78159 each carry a reported CVSS score of 9.8 and can enable unauthenticated remote code execution under relevant plugin conditions, potentially allowing site takeover; no exploitation has been reported.