Vendors and CVEs › Vendors › Cisco
Cisco: industrial cyber security news and vulnerabilities
3 stories in Industrial Cyber Brief name Cisco, 1 on CISA’s list of known exploited flaws, from Thursday 22 October 2026 to Saturday 7 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High
Attackers exploit Cisco firewall flaw to cause denial of service
CSA Singapore says attackers are exploiting a high-severity flaw in Cisco Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense to cause denial of service. It advises patching immediately.
High Known exploited
State-linked group exploits Cisco SD-WAN flaw to plant KeyDrift backdoor
Cisco Talos says an advanced threat group, UAT-11473, used CVE-2026-20127, an authentication bypass in Cisco SD-WAN Catalyst Controller, to gain access.
Low
Cisco launches operational technology security certification
Cisco has launched a new operational technology (OT) security certification. The headline links it to a skills gap exposed by the merging of IT and OT. No further detail is given.