HIGH/ OCTOBER 15, 2026TODAY’S BRIEFING — #209
Cisco Email Gateway RCE exploited; Nextcloud backdoors; 3 phishing platforms disrupted
Cisco Secure Email Gateway zero-day actively exploited for unauthenticated RCE; Nextcloud servers backdoored via Collabora vulnerability; Microsoft disrupts three phishing platforms behind 1B+ scam messages; U.S. charges 14 in North Korean IT worker fraud ring.
CVE-2026-76519Cisco Secure Email Gateway — Remote unauthenticated RCE with root privileges; actively exploitedCVE-2024-20401Cisco Secure Email Gateway — Remote unauthenticated RCE; [exploitation unverified]CVE-2025-20393Cisco Secure Email Gateway — Remote unauthenticated RCE; actively exploitedCVE-2026-76461Cisco Secure Email Gateway — Remote unauthenticated RCE; actively exploited
Read the full briefing →