Salt Typhoon logged into telecom network gear with stolen credentials in all but one case Talos examined
Cisco Talos's February 2025 analysis of Salt Typhoon's telecom intrusions found the actor used stolen legitimate logins on Cisco devices in all but one case. It then pulled more logins from weakly encrypted router configs and captured TACACS and RADIUS keys, so credentials stored on network gear are the first exposure for defenders to close.
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+5
- Incentives40
- Confidence66
CISA added four exploited flaws in PAN-OS, Cisco Secure Email Gateway and AhsayCBS to KEV with an October 17 federal deadline. We would take the Cisco gateway first, then AhsayCBS servers already patched once, then PAN-OS.
Perspective Coverage
3 publishers
- Builder
- Builder 20%
- Operator
- Operator 75%
- Investor
- Investor 5%
Reality
- Evidence80
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence78
Cisco patched CVE-2026-76519, an exploited Secure Email Gateway flaw that gives unauthenticated attackers root through a crafted email attachment. Devices with File Reputation enabled and Content Scanner Tools earlier than 25.3.0.5525 are affected.
Perspective Coverage
5 publishers
- Builder
- Builder 13%
- Operator
- Operator 76%
- Investor
- Investor 11%
Reality
- Evidence82
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence78
buildOne report1 publisher Researcher reports an actively exploited root RCE in Cisco's Secure Email Gateway
Satyam Rastogi reports that Cisco patched a Secure Email Gateway zero-day that let unauthenticated attackers run commands as root, exploited before the fix. The post gives no CVE or fixed version, so SEG operators have the warning but no build to patch to.
Reality
- Evidence25
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence35
buildOne report1 publisher Cisco's USFP optic starts at 6.4 Tbps and reaches 12.8 Tbps at 32 lanes
Cisco, working with Nvidia, announced USFP, an OSFP-sized pluggable that targets 12.8 Tbps from 32 lanes of 400G. The first spec is 16 lanes at 6.4 Tbps, a 4x gain over 1.6 Tbps optics. Only the 32-lane version reaches 8x.
Publishers:assets.theregister.com
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence50
Harmonic Security raises $50M Series B and has extended its AI checks beyond the browser to desktop apps and agentic workflows
Harmonic Security raised a $50 million Series B led by Crosspoint Capital Partners to govern how employees use AI tools. Its checks began in the browser and now cover desktop AI apps and agentic workflows, the company says.
Reality
- Evidence40
- Adoption45
- Hype gap+15
- Incentives70
- Confidence55
Nvidia contributed its Vera Rubin rack and compute tray designs to the Open Compute Project at the project's Global Summit in San Jose. Nvidia says builders get common blueprints for racks, networking, power and cooling; the benchmark figures released alongside are its own.
Perspective Coverage
4 publishers
- Builder
- Builder 35%
- Operator
- Operator 36%
- Investor
- Investor 29%
Reality
- Evidence52
- Adoption30
- Hype gap+25
- Incentives70
- Confidence62
Cisco says its new 51.2-terabit G302 switch chip will ship before the end of the year
Cisco told the Open Compute Project summit that its 102.4-terabit Silicon One G300 is now shipping to customers at volume. Buyers can order against those dates. The optics module Cisco showed with Nvidia rests on Cisco's own bandwidth claims.
Reality
- Evidence35
- Adoption30
- Hype gap+25
- Incentives70
- Confidence55
Cisco will let Webex users @mention AI agents, including Claude, in group spaces from Q1 2027, so the work is shared with the team. Agents used in calls stay visible only to the individual user, a Cisco spokesperson said.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+30
- Incentives65
- Confidence70
Cisco's survey of 8,000 security professionals scores Korean cyber defense at 58 out of 100 against a global average of 64. The report points to unclear roles and departmental turf-guarding inside organizations as the main drag.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives70
- Confidence55
buildConfirmed2 publishers NVIDIA and Cisco announced plans for USFP, a pluggable optic with 400Gb/s per lane and a stated ceiling of 12.8Tb/s per module. The first planned modules have 16 lanes, or 6.4Tb/s each way, so the ceiling needs 32 lanes or a two-way count.
Reality
- Evidence25
- Adoption4
- Hype gap+35
- Incentives65
- Confidence60
Google and Meta will use Nvidia networking gear while building rival chips, Nvidia says
Nvidia said at the OCP summit that Google and Meta will adopt its Spectrum-X and related networking gear. Google's named products are narrower than that description, so the announcement shows less about Nvidia's network position than its lead sentence suggests.
Reality
- Evidence40
- Adoption30
- Hype gap+35
- Incentives65
- Confidence50
Nvidia backs a pluggable optics format while promoting the co-packaged alternative
Four companies, Nvidia and Cisco among them, have introduced a new pluggable optics form factor for AI data centers, cryptobriefing.com reported. Nvidia also sells the co-packaged alternative, and the evidence that supplier lists will change is thin.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+35
- Incentives55
- Confidence45
buildOne report1 publisher One percent-encoded character gets an attacker admin API access to Cisco SD-WAN Manager
Cisco disclosed CVE-2026-76504, a CVSS 9.8 authentication bypass in Catalyst SD-WAN Manager that is already exploited and has no workaround. A dev.to analysis says one Manager can administer up to 6,000 devices, so patching is the only defense.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence55
Finance chiefs in Pigment's CFO Index found usage-priced AI costing more than they expected
Pigment's Q3 2026 CFO Index found 83% of respondents saw consumption-based AI costs come in above expectations. Budget owners should expect central sign-off and milestone gates, though CloudZero's survey has 87% still planning to spend more.
Reality
- Evidence42
- Adoption50
- Hype gap+20
- Incentives
- Not scored
- Confidence40
buildOne report1 publisher Cisco patches a CVSS 10.0 ISE bypass that reaches root through its gateway-fronted management API
Cisco rated a flaw in Identity Services Engine's management API CVSS 10.0 because one crafted, unauthenticated request could reach root. A dev.to analysis traces the likely gap to route coverage in the Kong-derived gateway that authenticates the API, a risk any proxy-authenticated service shares.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence55
Co-packaged optics asks switch buyers to give up choosing their own optics suppliers
Co-packaged optics, shrugged off when Cisco showed it on a 3.2TB switch at OFC 2023, now has the industry's attention, DatacenterDynamics reports. Operators have to decide whether its promised power savings are worth giving up the many pluggable suppliers that give them negotiating leverage.
Reality
- Evidence40
- Adoption30
- Hype gap+30
- Incentives60
- Confidence45
buildOne report1 publisher Five of Cisco's 11 new NX-OS flaws depend on NX-API or OAM being switched on
Cisco's four critical NX-OS advisories cover 11 CVEs across Nexus, MDS and UCS Fabric Interconnect hardware. Five need NX-API, MPLS OAM or NGOAM enabled while six apply in any configuration, so every affected switch still needs the fixed release.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Cisco patched five critical NX-OS flaws that can give attackers root code execution or force reloads on Nexus 3000 and 9000 switches. Each one needs NX-API, NGOAM or MPLS OAM turned on, so a switch's feature configuration decides its exposure before its software version does.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence68
Cisco recasts Webex as the front end of its single AI platform
Cisco used WebexOne to present Webex as the place where people and agents meet on one AI platform consolidated from roughly 250 acquisitions. Many Webex buyers got their first detailed look at that pitch in a keynote about token budgets and agent network load.
Reality
- Evidence35
- Adoption20
- Hype gap+35
- Incentives75
- Confidence40
Earlier coverage
- Cisco builds Webex agents that keep working after the customer hangs up
Product · October 7, 2026 · Confirmed2 publishers
- Cisco patches an ISE authentication bypass attackers used before the fix existed
Security · September 16, 2026 · Confirmed10 publishers
- Attackers reach admin on Cisco Catalyst SD-WAN Manager by encoding one URL character
Security · September 30, 2026 · Confirmed12 publishers
- Cisco's control planes are the exposure: four criticals in Crosswork, four in Secure Workload
Security · August 20, 2026 · Confirmed3 publishers
- CrowdStrike and Fortinet co-sign a letter that dates the security tooling they sell
Product · August 27, 2026 · Confirmed5 publishers
- Fire Ant taught a Cisco IOS XR router to forward only log lines containing the word Health
Security · August 31, 2026 · Confirmed6 publishers
- A default bind on ten Silicon One Nexus 9000 switches exposes root over ports 43210 and 43211
Security · September 3, 2026 · Confirmed4 publishers
- A CVSS 10.0 Cisco FMC bypass tops the four flaws CISA moved into KEV
Security · September 10, 2026 · Confirmed4 publishers
- Cisco's own July 23 log indicator predates its August date for FMC exploitation
Security · September 9, 2026 · Confirmed6 publishers
- An Iran-linked actor built US Navy targeting handbooks from public data with Claude's help
Invest · September 11, 2026 · Confirmed2 publishers
- A crafted request to one Cisco ISE API endpoint reaches root without a credential
Build · September 19, 2026 · Confirmed2 publishers