Cisco Firewalls Exploited, AI Scams Surge, Cloud Security Bill Introduced

Critical Vulnerabilities Under Active Exploitation:

• Cisco Patches Actively Exploited Zero-Day Crashing Firewalls: Cisco has updated its guidance on CVE-2026-76418, confirming no workarounds are available for the actively exploited zero-day vulnerability affecting ASA and FTD firewalls. This emphasizes the critical need for immediate patching to mitigate the denial-of-service threat.
• Chinese APT Exploited Low-Severity VMware Flaw for Stealth: Further analysis reveals the China-nexus APT group Warp Panda uses custom malware, BRICKSTORM and SharpStorm, for persistence and data collection. They also target Microsoft 365 by stealing session tokens, broadening their post-exploitation capabilities.

New Threats and Advisories:

• Polymarket Loses $2.7M in Supply Chain Attack via DebugBear: The prediction market platform Polymarket suspended trading after a supply chain attack via a compromised DebugBear script resulted in approximately $2.71 million in unauthorized withdrawals. Attackers injected malicious JavaScript into DebugBear's RUM script, hijacking user sessions to execute trades.
• Trojanized 'Claude Code' VS Code Extension Installs SSH Backdoor: A malicious version of the 'Claude Code' VS Code extension, distributed via the Cursor IDE marketplace, installed a persistent SSH backdoor on developers' machines. Users are urged to check for unauthorized SSH keys and rotate credentials.
• Akamai: AI-Driven Scams Double, Phishing Attack Lifespan Halved: Akamai reports that AI-powered online scams doubled in Q1 2026, surpassing traditional phishing. The operational lifespan of phishing campaigns has shrunk by over 50% to 22 days due to automation and PhaaS toolkits.

Policy & Industry Notes:

• FDD Urges NIST, NSA to Evaluate New Anti-Ransomware Tech: The Foundation for Defense of Democracies (FDD) has urged NIST and the NSA to evaluate 'vaultless, keyless pseudonymization' as a safeguard against ransomware and data breaches, advocating for making stolen data valueless.
• U.S. Bill Aims to Bolster Cloud Security Standards via NIST: U.S. Representative Rich McCormick introduced the 'Common-Sense Cloud Security Act,' directing NIST to develop updated cybersecurity standards for cloud services, focusing on critical infrastructure and sensitive data protection.