2026-06-05: Cisco discloses seventh SD-WAN zero-day this year, now actively exploited for root escalation with

Show Notes - 2026-06-05 Stories Covered: - June 5, 2026 - Today: - Cisco SD-WAN Zero-Day Actively Exploited (CVE-2026-20245) (https://www.bleepingcomputer.com/news/security/new-cisco-sd-wan-flaw-exploited-in-zero-day-attacks-to-gain-root/) - Cisco Unified CM Critical SSRF with Public PoC (CVE-2026-20230) (https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-unified-cm-flaw-with-poc-exploit-code/) - Windows 11 Zero-Day (CVE-2026-0257) (https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-23-7/) - AI Agents as Insider Threat (https://cyberscoop.com/ai-agent-insider-threat-cybersecurity-dtex/) - Claude Code GitHub Action Repository Takeover (https://thehackernews.com/2026/06/claude-code-github-action-flaw-let-one.html) - Microsoft Agentic AI Failure Modes v2.0 (https://www.microsoft.com/en-us/security/blog/2026/06/04/updating-taxonomy-failure-modes-agentic-ai-systems-year-red-teaming-taught-us/) - UN World Food Programme Gaza Breach (600,000 Households) (https://www.bleepingcomputer.com/news/security/un-world-food-programme-breach-affects-600-000-gaza-households/) - DentaQuest Breach (2.6 Million Accounts) (https://www.bleepingcomputer.com/news/security/dentaquest-data-breach-exposed-info-of-26-million-accounts/) - China-Linked TA4922 Expands to Europe (https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-23-7/) - IronWorm npm Supply Chain Attack (36 Packages) (https://www.bleepingcomputer.com/news/security/new-ironworm-malware-hits-36-packages-in-npm-supply-chain-attack/) - Russian Mobile Spyware Operation (https://thehackernews.com/2026/06/threatsday-bulletin-ai-agents-gone.html) - Microsoft M365 Copilot RCE (CVE-2026-45497) (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45497) - Windows Driver Update Issue (https://www.bleepingcomputer.com/news/microsoft/microsoft-blames-unexpected-windows-driver-updates-on-caching-issue/) - Chrome 149 Patches Record 429 Vulnerabilities (https://www.securityweek.com/chrome-149-patches-429-vulnerabilities/) - Hola Browser Supply Chain Compromise (https://www.bleepingcomputer.com/news/security/hola-browser-for-windows-compromised-to-deliver-cryptominer/) - Everest Forms Pro WordPress RCE Actively Exploited (CVE-2026-3300) (https://thehackernews.com/2026/06/hackers-exploit-critical-everest-forms.html) - Magecart Campaign Abuses Stripe API (https://www.bleepingcomputer.com/news/security/credit-card-theft-campaign-abuses-stripe-to-host-stolen-payment-info/) - VIP Keylogger via JavaScript Loaders (https://isc.sans.edu/diary/rss/33054) - FlutterShell macOS Malvertising (https://thehackernews.com/2026/06/fluttershell-backdoor-spreads-to-macos.html) - FIFA World Cup 2026 Scams (https://thehackernews.com/2026/06/fifa-world-cup-2026-scams-are-already.html) - Hitachi Energy ICS Vulnerabilities (https://www.cisa.gov/news-events/ics-advisories/icsa-26-155-04) - B&R PPT30 OPC-UA DoS (CVE-2025-11482) (https://www.cisa.gov/news-events/ics-advisories/icsa-26-155-03) CVEs Referenced: CVE-2024-8176, CVE-2025-11482, CVE-2025-20309, CVE-2025-59375, CVE-2026-0257, CVE-2026-10881, CVE-2026-10882, CVE-2026-10883, CVE-2026-20045, CVE-2026-20127, CVE-2026-20182, CVE-2026-20230, CVE-2026-20245, CVE-2026-25253, CVE-2026-3300, CVE-2026-45497, CVE-2026-7310 Indicators of Compromise: IPs: 202.56.2.126, 209.146.60.26, 15.235.166.18, 185.78.165.153 Full brief: https://carolinacleartech.com/brief/2026-06-05/

Episode metadata supplied by the publisher feed · Published Jun 5, 2026

Embed this episode

Attribution link and audio player

What this episode covers

Distinct summary based on available episode metadata or transcript content.

NOW PLAYING

2026-06-05: Cisco discloses seventh SD-WAN zero-day this year, now actively exploited for root escalation with

0:00 27:52

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

CISO Perspectives (public) N2K Networks This season on CISO Perspectives, host Kim Jones explores some of the challenges of leading through uncertainty. We explore the complexity of the changing nature of regulation and working with the federal government, the evolution of privacy and fraud, and how emerging technologies like AI and quantum computing are changing cyber. When you don’t know what questions to ask, you’re afraid to ask, or don’t know who to ask, CISO Perspectives provides the foundation for learning in this brave new world. The Pelican Brief Bill Fleming The Pelican Brief is a show dedicated to promoting the common good on common ground through common sense hosted by Bill Fleming

Frequently Asked Questions

How long is this episode of Cyber Threat Brief?

This episode is 27 minutes long.

When was this Cyber Threat Brief episode published?

This episode was published on June 5, 2026.

Can I download this Cyber Threat Brief episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!