New Cisco firewall zero-day exploited to crash SSL VPN devices

By Sergiu Gatlan

AI Summary

Cisco released patches for a zero-day denial-of-service vulnerability (CVE-2026-76418, CVSS 8.6) in Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that is being actively exploited in the wild. Unauthenticated remote attackers can trigger the flaw to crash SSL VPN services on affected firewall devices. This is the second Cisco firewall VPN zero-day exploited since August, making immediate patching critical for organizations relying on Cisco perimeter defenses.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 90.0/100

# More from October 30

1
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen The Hacker News
3
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network SecurityWeek
4
Volt Typhoon hides zero-day attacks using 'Silent Train' framework BleepingComputer
5
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces The Hacker News
6
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility The Hacker News
7
Chrome extensions with 13.4 million installs caught hijacking searches BleepingComputer
8
Massive leak exposes 41,000 DHS workers and undercover ICE agents Ars Technica Security
9
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls The Hacker News
10
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys The Hacker News