ThreatsDay: Cisco Vulnerabilities, ClickFix Chains, and a Rise in AI‑Agent Incidents

Colleagues, a new ThreatsDay report highlights several serious cybersecurity cases.

- Cisco released patches for a critical SSRF vulnerability (CVE-2026-20230); fixes available for Unified CM.
- Large-scale DriveSurge/ClickFix and FakeUpdates campaigns are compromising websites and delivering loaders/stealers.
- Agentic AI and AI‑assisted tools are being used to test EDR evasions and are already causing real incidents.
- Misuse of trusted tooling (FalkonC2, using Steam as a dead drop) and a surge in exploits against Linux environments and clusters.

Why this matters: accelerate patching, remove exposed admin panels, enforce least-privilege, and ensure logging and recovery.

How will you prioritise these risks?
#cybersecurity #vulnerabilities #AI #incidents