⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
ESET researchers participated in Operation Endgame, a global law enforcement operation to disrupt the Amadey botnet and Stealc infostealer operations. ESET contributed technical analysis, infrastructure tracking, and affiliate-level intelligence to aid the takedown.
Mandiant identified a threat actor targeting SD-WAN infrastructure who exploited a zero-day vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager to escalate privileges to root. The attacker used rogue peering for initial access and employed extensive anti-forensic cleanup to avoid detection.
Written by: Chester Sng, Pete Boonyakarn, Logeswaran Nadarajan, Lukasz Lamparski Introduction In early 2026, Mandiant identified a threat actor targeting SD-WAN infrastructure at a service provider. After gaining initial access, the threat actor exploited a zero-day vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN to escalate privileges from a compromised administrative account to root-level access.
This article details a threat actor's exploitation of CVE-2026-20245 in Cisco Catalyst SD-WAN Manager, escalating from a compromised admin account to root via a malicious CSV upload. The attacker maintained operational security through anti-forensic techniques and the article also explains the basics of SD-WAN technology.
Written by: Chester Sng, Pete Boonyakarn, Logeswaran Nadarajan, Lukasz Lamparski Introduction In early 2026, Mandiant identified a threat actor targeting SD-WAN infrastructure at a service provider. After gaining initial access, the threat actor exploited a zero-day vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN to escalate privileges from a compromised administrative account to root-level access.
Unit 42's analysis of OpenClaw's ClawHub marketplace reveals evasive malicious skills that bypass automated scanners to deploy infostealers and conduct agentic financial fraud. The research highlights the emerging AI supply chain threat as agentic AI platforms grow in popularity.