HIGH/ SEPTEMBER 10, 2026TODAY’S BRIEFING — #174
Cisco FMC actively exploited; BlueMoon exploit kit chains Chrome & Windows; AI tokens bypass MFA
Cisco Secure FMC flaw CVE-2026-20079 under active attack; four China-linked espionage groups deployed BlueMoon exploit kit targeting Chrome and Windows; AI user accounts hijacked via infostealer logs to bypass MFA.
CVE-2026-20079Cisco Secure Firewall Management Center — Authentication bypass; actively exploited in attacksCVE-2026-81963Microsoft Windows 11 23h2 — Link following privilege escalation; CISA KEVCVE-2026-85880Microsoft Windows 10 1607 — Heap-based buffer overflow privilege escalation; CISA KEVCVE-2026-28662Android — Critical vulnerability; patched in September 2026 updates
Read the full briefing →