Threat update
Cisco has confirmed that attackers are actively exploiting a high-severity flaw in Cisco Secure Firewall ASA and Firepower Threat Defense (FTD). Tracked as CVE-2026-76418 (CVSS 8.6), the bug lets anyone on the internet send a crafted request to your VPN login page and force the firewall to reboot. No username or password needed. Keep sending those requests and the firewall keeps going down, taking your remote workers, branch connections, and anything else behind it along for the ride. CISA added this one to its Known Exploited Vulnerabilities catalog on October 29. If you run Cisco firewalls with SSL VPN, it belongs at the top of this week's patch list.
Employees did everything security training told them to do typed the password, approved the MFA prompt, and attackers walked into their inbox anyway, because this attack never needed to beat MFA at all; it just stole the session that came after it.
