Threat Watch– active
All incidents
More on Threat Watch
More Cisco incidents
- VOLTA-AUTODOXER: Windows infostealer configured to send victim data to Claude, Gemini, Kimi (no CVE) High · Breach
- Dependency-confusion PoC package: @mobile-platform/magnetic-components (npm) — preinstall script runs on install, phones home via DNS Medium · Supply chain
- IT help-desk vishing: fake support calls gave attackers Quick Assist access, one led to VYPR ransomware High · Breach
- KeyDrift (UAT-11473): Cisco SD-WAN auth bypass used to steal AES traffic keys (CVE-2026-20127) Critical · Breach
- Volt Typhoon 'Silent Train': relay chains used to exploit zero-days in SD-WAN and IT-management tools Critical · Breach
- Cisco ASA/FTD SSL VPN zero-day exploited for DoS — patches released (CVE-2026-76418) High · Patch now
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.