CVE-2026-76460 hits Cisco ISE with a perfect 10.0 CVSS, no auth required, root on exploit. It's the third max-severity API auth bypass Cisco has shipped in 2026.
A perfect-10 auth bypass in Azure AI Foundry, three more critical cloud flaws, and an active exploit kit called BlueMoon. Microsoft's week gets worse.
Microsoft disclosed two campaigns weaponizing passkey confusion and CEO impersonation against cloud tenants. The identity provider bet just got more expensive.
BlueMoon chained three zero-days and spread across four Chinese espionage groups in under a week. The economics of exploit development just shifted, and platform leads should be recalculating.
Google's $32B Wiz acquisition rewrites every CSPM shortlist for 2026. Here's what platform leads should sign, delay, or renegotiate this quarter.
Two Cisco FMC bugs are being exploited by Sandworm and a Qilin ransomware operator. The management plane is now the breach vector, and platform leads need to reprice vendor risk.
A single shell command lets a DeepSeek Harness AI agent flip itself to danger-full-access. CVSS 9.4, shipped defaults, no credentials, 215,000 GitHub stars.