HeadFlash Security

Cisco ISE Zero-Day Exploited; CISA Orders Three-Day Patch

3:32

Cisco patches a maximum-severity ISE authentication bypass under active attack as CISA orders federal agencies to fix it within three days.

Sources:

Cisco warns of max severity ISE zero-day exploited in attacks

PhantomFix: a fabricated bug that hijacks an AI autofix agent (CVE-2026-90999)

China's FamousSparrow APT Spies on US Politics in Latin America

Malicious JavaScript Evaded VirusTotal…