CVE-2026-20223 2

Vulnerability (CVE)

Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access

Cisco released updates for CVE-2026-20223, a CVSS 10.0 flaw in Secure Workload caused by insufficient validation and authentication on REST API endpoints, which lets an unauthenticated remote attacker read sensitive information and make configuration...

Vulnerabilities & Patching

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

Cyber Risks The Hacker News

GitHub confirmed that a breach of its internal repositories came from an employee device compromised by a poisoned version of the Nx Console VS Code extension, allowing a cybercriminal group called TeamPCP to exfiltrate about 3,800 repositories. The Nx...

Threat Actors & Nation-State