To achieve the complete subjugation of a Cisco mail gateway, an attacker now requires only a single, meticulously crafted email. The critical vulnerability designated as CVE-2026-76461 is actively weaponized in real-world attacks. Terrifyingly, it permits unauthenticated, remote actors to execute arbitrary commands possessing absolute root privileges. The Mechanics of the SQL Injection Attack The fundamental flaw resides within the email parsing engine of Cisco AsyncOS, specifically designed for the Secure Email Gateway.

AT&T email-to-text ends June 17, 2025! Learn why it's happening, the impact on critical alerts and how to migrate with our friendly guide.

Phishing hackers have developed a new technique for smuggling malware past secure email gateway defenses, said researchers at Cofense who uncovered a recent info