The short version
Today in 4 stories
- Cisco patches actively exploited Secure Email Gateway zero-dayCisco's email gateway had an unauthenticated, root-level command execution flaw under active attack.
- Cisco warns compromised gateways may need full cluster recoveryA single compromised Cisco gateway may require recovery across its entire cluster.
- Wireshark fixes 19 flaws including a code-execution route via profile importsWireshark's latest update fixes a code-execution bug tied to configuration-profile imports.
- AI-era vulnerability volume and exploitation speed both climbing sharplyVulnerability disclosure volume is rising while exploitation now happens within hours, not weeks.
Cisco patches actively exploited Secure Email Gateway zero-day
A critical flaw (CVSS 9.8) in Cisco AsyncOS lets attackers execute root-level commands via a crafted email, without credentials or admin access. It was added to CISA's Known Exploited Vulnerabilities catalogue, with Canadian and UK security agencies also confirming active exploitation.
Cisco warns compromised gateways may need full cluster recovery
Cisco says root access could let attackers hide evidence, and compromised appliances may expose SSH keys shared between cluster members. Recovery guidance includes renewing credentials and cryptographic material across every cluster member, not just the device that triggered an alert.
Wireshark fixes 19 flaws including a code-execution route via profile imports
Wireshark 4.6.9 and 4.4.19 patch 19 vulnerabilities, including one that could allow arbitrary code execution when a user imports a malicious configuration profile. Other fixes address infinite loops and memory leaks triggered by malformed capture files, affecting both the desktop app and the Sharkd analysis daemon.
AI-era vulnerability volume and exploitation speed both climbing sharply
Published CVEs reportedly rose nearly 50% year-on-year in the first half of 2026, while the average time from disclosure to exploitation fell from over three weeks to roughly eight hours. The gap between periodic security testing and this pace is cited as a growing problem for validation programs.
The takeaway
What to do this week
Prioritise the Cisco Secure Email Gateway patch and confirm every appliance in any affected cluster has been remediated, not just the first one touched. Separately, update Wireshark where it is used for investigations, since malformed files can now compromise the analysis tool itself.
Where this comes from
Compiled by Cyentrix from 8 newsletters received 14 October 2026 ("The Cyber Security Hub™ via LinkedIn", ISACA, ISACA SmartBrief on Cybersecurity). Summaries are drafted with AI assistance from the newsletter text and edited for length; follow the source links for the full reporting. Cyentrix is not the original reporter of these items.