{"metadata": {"vulnerability": "CVE-2026-76418", "count": 139, "kinds": {"milestone": 8, "sighting": 101, "kev": 11, "other": 19}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0463", "record": "NCSC-2026-0463", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-08-19T12:02:03.633Z", "date_only": false, "value": "2026-08-19T12:02:03.633Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-76418", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": true, "value": "2026-10-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1412", "record": "CERTFR-2026-AVI-1412", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76418", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76418", "record": "FKIE_CVE-2026-76418", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-28T16:00:00Z", "date_only": false, "value": "2026-10-28T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-28T19:13:23Z", "date_only": false, "value": "2026-10-28T19:13:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-28T19:15:00Z", "date_only": false, "value": "2026-10-28T19:15:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T19:15:00Z", "date_only": false, "value": "2026-10-28T19:15:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T19:44:49Z", "date_only": false, "value": "2026-10-28T19:44:49+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-76418", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-28T19:44:49Z", "date_only": false, "value": "2026-10-28T19:44:49+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-76418", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-28T19:44:49Z", "date_only": false, "value": "2026-10-28T19:44:49+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-76418", "field": "status.status_updated_at", "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-28T19:44:49.450Z", "date_only": false, "value": "2026-10-28T19:44:49.450Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-76418", "field": "evidence.0.details.added_date", "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-28T20:00:00Z", "date_only": false, "value": "2026-10-28T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-denial-of-service-vulnerability_20261029", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "15cadbd8-0d84-4315-9130-8addd3ea63c9", "url": "https://www.hkcert.org/security-bulletin/cisco-products-denial-of-service-vulnerability_20261029"}, {"timestamp": "2026-10-28T20:00:34Z", "date_only": false, "value": "2026-10-28T20:00:34+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-28T20:05:31.926Z", "date_only": false, "value": "2026-10-28T20:05:31.926Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-76418", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T20:05:31.926Z", "date_only": false, "value": "2026-10-28T20:05:31.926Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-76418", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T20:10:23.254Z", "date_only": false, "value": "2026-10-28T20:10:23.254359Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117520349438075953", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "87e6aba2-7348-4dd4-b1b4-23065e791d7a", "content": "CVE-2026-76418 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.\nhttps://www.cve.org/CVERecord?id=CVE-2026-76418https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75#cisco #Cisco #CiscoSecureFirewallAdaptiveSecurityAppliance(ASA)Software #CiscoSecureFirewallThreatDefense(FTD)Software#CVE_2026_76418#bot", "url": "https://infosec.exchange/users/cve/statuses/117520349438075953"}, {"timestamp": "2026-10-28T20:18:47Z", "date_only": false, "value": "2026-10-28T20:18:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3WHV-82G3-5CWX", "record": "GHSA-3WHV-82G3-5CWX", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T20:18:47.063Z", "date_only": false, "value": "2026-10-28T20:18:47.063", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76418", "record": "FKIE_CVE-2026-76418", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T20:19:34.286Z", "date_only": false, "value": "2026-10-28T20:19:34.286928Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117520383906708611", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "87037caf-6f77-4b4a-9825-1a40a0ecc8ac", "content": "Cisco zero-day: CVE-2026-76418 (8.6 high)Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability\n\nIn October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75\n#cisco #zeroday #eitw #CVE", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117520383906708611"}, {"timestamp": "2026-10-28T20:46:37.330Z", "date_only": false, "value": "2026-10-28T20:46:37.330557Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3myxmof6bvv2w", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "9713cc10-fc36-49c8-95e5-fc2cb4143d5e", "content": "\ud83d\udfe0 CVE-2026-76418 - High (8.6)\n\nA vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security A...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76418/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3myxmof6bvv2w"}, {"timestamp": "2026-10-28T21:00:00Z", "date_only": false, "value": "2026-10-28T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2150", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "eaac0bc4-823b-44df-b5e0-1cca40dd8810", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2150"}, {"timestamp": "2026-10-28T21:31:18Z", "date_only": false, "value": "2026-10-28T21:31:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3WHV-82G3-5CWX", "record": "GHSA-3WHV-82G3-5CWX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T21:43:15.137Z", "date_only": false, "value": "2026-10-28T21:43:15.137724Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3myxptodroa2m", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "2faf16cf-05c8-4538-9d6e-9f96135f8168", "content": "Patch CVE-2026-76418 now. This high-severity Cisco Secure Firewall vulnerability is exploited in the wild to trigger SSL VPN DoS reloads on ASA and FTD.\n\n#Cisco #CiscoASA #CiscoFTD #CVE202676418 #SSLVPN #ZeroDay #Cybersecurity #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3myxptodroa2m"}, {"timestamp": "2026-10-28T23:43:32.357Z", "date_only": false, "value": "2026-10-28T23:43:32.357700Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3myxwkoai2225", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "472ee3f9-39c6-4cef-9aec-4cca8f6dffc8", "content": "Cisco\u306eSSL VPN\u8106\u5f31\u6027\u300cCVE-2026-76418\u300d\u304c\u60aa\u7528\u3001ASA\u30fbFTD\u306e\u518d\u8d77\u52d5\u3092\u5f15\u304d\u8d77\u3053\u3059 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3myxwkoai2225"}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-76418", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "59f5cef5-7296-4153-8903-cf02fcef7612", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": true, "value": "2026-10-29", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76418", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": true, "value": "2026-10-29", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-76418", "field": "evidence.0.details.date_added", "uuid": "59f5cef5-7296-4153-8903-cf02fcef7612", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-76418", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "59f5cef5-7296-4153-8903-cf02fcef7612", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1412", "record": "CERTFR-2026-AVI-1412", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1412", "record": "CERTFR-2026-AVI-1412", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1412", "record": "CERTFR-2026-AVI-1412", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-76418", "field": "status.status_updated_at", "uuid": "59f5cef5-7296-4153-8903-cf02fcef7612", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76418", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2026-76418 added to CISA KEV"}, {"timestamp": "2026-10-29T05:13:07Z", "date_only": false, "value": "2026-10-29T05:13:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-1102", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "0842a19d-3ef4-4780-a6bb-7c2f81437de3", "url": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-1102"}, {"timestamp": "2026-10-29T08:06:47Z", "date_only": false, "value": "2026-10-29T08:06:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/10/29/cisco-patches-actively-exploited-ssl.html", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "0a247fef-c1f7-42f8-ae33-c4a96169916b", "content": "Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls\n\nCisco has released security updates for a critical vulnerability in the Remote Access SSL VPN service of its Secure Firewall ASA and FTD software, tracked as CVE-2026-76418. The flaw lets unauthenticated attackers trigger unexpected device reloads, causing denial of service, and Cisco says it has been actively exploited.", "url": "https://threatintel.cc/2026/10/29/cisco-patches-actively-exploited-ssl.html"}, {"timestamp": "2026-10-29T08:12:17Z", "date_only": false, "value": "2026-10-29T08:12:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/cisco-rilevato-sfruttamento-in-rete-della-cve-2026-76418", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "4bc7cc3b-e6c1-48a5-9c32-b3e294bfacb2", "content": "Cisco ha rilevato lo sfruttamento in rete di una vulnerabilit\u00e0 con gravit\u00e0 \"alta\", identificata tramite la CVE-2026-76418, in Secure Firewall Adaptive Security Appliance (ASA) e Secure Firewall Threat Defense (FTD). Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio sui sistemi interessati", "url": "https://www.acn.gov.it/portale/w/cisco-rilevato-sfruttamento-in-rete-della-cve-2026-76418"}, {"timestamp": "2026-10-29T09:07:11.514Z", "date_only": false, "value": "2026-10-29T09:07:11.514153Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117523403661469344", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "74d037b7-1035-411c-9d7d-3bfef553f3f8", "content": "Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls\nCisco has released security updates for a critical vulnerability in the Remote Access SSL VPN service of its Secure Firewall ASA and FTD software, tracked as CVE-2026-76418. The flaw lets unauthenticated attackers trigger unexpected device reloads, causing denial of service, and Cisco says it has been actively exploited. https://gbhackers.com/cisco-patches-actively-exploited-ssl-vpn-vulnerability/", "url": "https://infosec.exchange/users/edwardk/statuses/117523403661469344"}, {"timestamp": "2026-10-29T09:44:46Z", "date_only": false, "value": "2026-10-29T09:44:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "423eb816-0f0a-4da3-b4e0-4781919959c5", "content": "Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-76418, is rated 8.6 on the CVSS scoring system. Successful exploitation could allow an unauthenticated, remote attacker to cause the", "url": "https://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html"}, {"timestamp": "2026-10-29T09:54:35.209Z", "date_only": false, "value": "2026-10-29T09:54:35.209380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/veduis.bsky.social/post/3myyypetvsb2k", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e362f99e-9664-492f-9b00-ab2a78969a96", "content": "Cisco patched an exploited ASA and FTD bug, CVE-2026-76418, CVSS 8.6, in Remote Access SSL VPN. Remote, unauthenticated. Second firewall VPN zero-day since August.", "url": "https://bsky.app/profile/veduis.bsky.social/post/3myyypetvsb2k"}, {"timestamp": "2026-10-29T10:04:04.538Z", "date_only": false, "value": "2026-10-29T10:04:04.538300Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3myyzad42qq2l", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e0f512ef-8b65-4da9-a2c0-a3e0f35252c3", "content": "Cisco released fixes for CVE-2026-76418, an unauthenticated Remote Access SSL VPN flaw that can force ASA/FTD reloads and disrupt availability.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3myyzad42qq2l"}, {"timestamp": "2026-10-29T10:04:05.944Z", "date_only": false, "value": "2026-10-29T10:04:05.944419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3myyzaf4ixe2t", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "66387aea-2962-47ca-aa9d-e4bc1574a811", "content": "Cisco released fixes for CVE-2026-76418, an unauthenticated Remote Access SSL VPN flaw that can force ASA/FTD reloads and disrupt availability.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3myyzaf4ixe2t"}, {"timestamp": "2026-10-29T10:47:28Z", "date_only": false, "value": "2026-10-29T10:47:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10505", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "ef40152f-8750-4501-a6e1-ad8d48519086", "content": "\ud83d\udea8 Cisco patches actively exploited ASA and FTD firewall flaw.\n\nCVE-2026-76418 (CVSS 8.6) can let unauthenticated attackers remotely crash affected firewalls, causing denial of service.\n\nNo successful VPN login required.\n\nDetails + affected versions \u2193 https://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html", "url": "https://t.me/thehackernews/10505", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T10:47:28Z", "date_only": false, "value": "2026-10-29T10:47:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10505", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "a5242f6f-83b4-45ae-87b0-03e2d39fc248", "content": "\ud83d\udea8 Cisco patches actively exploited ASA and FTD firewall flaw.\n\nCVE-2026-76418 (CVSS 8.6) can let unauthenticated attackers remotely crash affected firewalls, causing denial of service.\n\nNo successful VPN login required.\n\nDetails + affected versions \u2193 https://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html", "url": "https://t.me/thehackernews/10505"}, {"timestamp": "2026-10-29T11:03:36.233Z", "date_only": false, "value": "2026-10-29T11:03:36.233059Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3myz4kqljwa2i", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e54317b4-5c34-4c1d-b8cb-0bf07f592457", "content": "ASA & FTD firewalls hit by un\u2010authenticated DoS via SSL VPN\u2014patch CVE-2026-76418 or disable secondary auth ASAP. #Cybersecurity #VPN #Cisco #ASA #FTD #CVE2026 thedailytechfeed.com/cisco-urgent...", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3myz4kqljwa2i"}, {"timestamp": "2026-10-29T11:12:17.404Z", "date_only": false, "value": "2026-10-29T11:12:17.404611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3myz52cddbm2k", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "00815ec4-8560-47df-8266-1285f04d7f13", "content": "CVE-2026-76418 enables unauthenticated remote attackers to trigger unexpected reloads via ASA/FTD SSL VPN secondary authentication, causing denial-of-service.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3myz52cddbm2k"}, {"timestamp": "2026-10-29T11:12:39.345Z", "date_only": false, "value": "2026-10-29T11:12:39.345753Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3myz52xf2yq2j", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e33381f1-b269-43f2-a4c0-e8a09bfbec9e", "content": "CVE-2026-76418 enables unauthenticated remote attackers to trigger unexpected reloads via ASA/FTD SSL VPN secondary authentication, causing denial-of-service.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3myz52xf2yq2j"}, {"timestamp": "2026-10-29T11:13:28.094Z", "date_only": false, "value": "2026-10-29T11:13:28.094294Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3myz54fyfcy2l", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "5ffe9f87-c266-4f31-9f2f-6d0fd2e6bcd1", "content": "CVE-2026-76418 enables unauthenticated remote attackers to trigger unexpected reloads via ASA/FTD SSL VPN secondary authentication, causing denial-of-service.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3myz54fyfcy2l"}, {"timestamp": "2026-10-29T11:15:06.943Z", "date_only": false, "value": "2026-10-29T11:15:06.943257Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacks.gr/post/3myz57efofi2n", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "73f8fe32-3e91-479d-b66f-c236dd3c4e21", "content": "Firewall availability is at stake: Cisco confirmed exploitation of CVE-2026-76418, which can let an unauthenticated remote attacker force Secure Firewall ASA/F\u2026\n\nhttps://en.hacks.gr/h-cisco-diorthonei-sovaro-keno-asfaleias-poy-chrisimopoieitai-idi-se-epitheseis/\n\n#Cisco #SecureFirewall #CVE202676418", "url": "https://bsky.app/profile/hacks.gr/post/3myz57efofi2n"}, {"timestamp": "2026-10-29T11:19:58.779Z", "date_only": false, "value": "2026-10-29T11:19:58.779844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3myz5i3md5d2d", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "bb121d23-c01f-41e7-bdb0-727e499d8a66", "content": "\ud83e\udd16 CVE-2026-76418 (CVSS 8.6): unauthenticated remote DoS in Cisco Secure Firewall ASA & FTD \u2014 crafted request to the SSL VPN service crashes the device. Exploited in the wild, patches out.\nhttps://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3myz5i3md5d2d"}, {"timestamp": "2026-10-29T11:36:36.209Z", "date_only": false, "value": "2026-10-29T11:36:36.209225Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyber-threat.net/post/3myz6fsqsua2u", "record": "cve-2026-76418", "field": "creation_timestamp", "uuid": "98639c12-9424-423f-8ec8-3a311a4b3fba", "content": "Full write-up: https://cyber-threat.net/cisco-asa-ftd-cve-2026-76418-ssl-vpn-dos/", "url": "https://bsky.app/profile/cyber-threat.net/post/3myz6fsqsua2u"}, {"timestamp": "2026-10-29T11:38:50.439Z", "date_only": false, "value": "2026-10-29T11:38:50.439843Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3myz6jsguqx2l", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "b1a79358-1034-4988-bcf0-d2627c213725", "content": "Cisco Patches Actively Exploited ASA and FTD Firewall Zero-Day\u00a0Vulnerability\n\nCisco patches actively exploited ASA and FTD firewall zero-day CVE-2026-76418, which lets unauthenticated attackers crash vulnerable devices remotely.", "url": "https://bsky.app/profile/abijita.bsky.social/post/3myz6jsguqx2l"}, {"timestamp": "2026-10-29T12:11:43.572Z", "date_only": false, "value": "2026-10-29T12:11:43.572759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axnews.bsky.social/post/3myzaempmfy24", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "3c730148-b426-47fd-8f23-aace903e9ae6", "content": "\ud83d\udea8 Breaking: CVE-2026-76418 \u2014 High 8.6\nImpacted if: Cisco Secure Firewall Adaptive Se\u2026 9.16.1 \u2192 9.24.1.26 (142 versions)\nover the network \u00b7 no login\nhttps://ax-news.com/cve/CVE-2026-76418\n#CVE #infosec", "url": "https://bsky.app/profile/axnews.bsky.social/post/3myzaempmfy24"}, {"timestamp": "2026-10-29T12:18:04.345Z", "date_only": false, "value": "2026-10-29T12:18:04.345294Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tecnologiageek.com/post/3myzapwnuqv2u", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "4e17d234-425f-4a3b-ae1a-f5743b51f3d9", "content": "CVE-2026-76418 en Cisco ASA y FTD: VPN bajo ataque\u00a0activo\n\nCVE-2026-76418 ya se explota contra equipos Cisco ASA y FTD con la VPN SSL activa. Un atacante remoto, sin iniciar sesi\u00f3n y sin credenciales, puede enviar una petici\u00f3n preparada durante la conexi\u00f3n y forzar el reinicio inesperado del\u2026", "url": "https://bsky.app/profile/tecnologiageek.com/post/3myzapwnuqv2u"}, {"timestamp": "2026-10-29T12:33:52Z", "date_only": false, "value": "2026-10-29T12:33:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityIL/88312", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "548baa4c-ebb3-44e5-a38b-f451136b31f4", "content": "\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e4\u05d9\u05d9\u05e8\u05d5\u05d5\u05dc \u05e9\u05dc Cisco \u05db\u05d3\u05d9 \u05dc\u05d1\u05e6\u05e2 \u05d0\u05ea\u05d7\u05d5\u05dc \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05de\u05db\u05e9\u05d9\u05e8.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-76418, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05e9\u05dc\u05d5\u05d7 \u05d1\u05e7\u05e9\u05d4 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d5\u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05de\u05db\u05e9\u05d9\u05e8 \u05dc\u05d0\u05ea\u05d7\u05dc \u05d0\u05ea \u05e2\u05e6\u05de\u05d5.\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e4\u05d5\u05d2\u05e2\u05ea \u05d1\u05de\u05db\u05e9\u05d9\u05e8\u05d9 ASA \u05d5-FTD. \n\n\u05e1\u05d9\u05e1\u05e7\u05d5 \u05e4\u05e8\u05e1\u05de\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05e2\u05dd \u05e4\u05d0\u05e6', \u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75\n\nhttps://t.me/CyberSecurityIL/9803", "url": "https://t.me/CyberSecurityIL/88312", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T12:33:52Z", "date_only": false, "value": "2026-10-29T12:33:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityIL/9803", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "bf607d70-1e92-4bd3-9eda-1fe81c3734a5", "content": "\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e4\u05d9\u05d9\u05e8\u05d5\u05d5\u05dc \u05e9\u05dc Cisco \u05db\u05d3\u05d9 \u05dc\u05d1\u05e6\u05e2 \u05d0\u05ea\u05d7\u05d5\u05dc \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05de\u05db\u05e9\u05d9\u05e8.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-76418, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05e9\u05dc\u05d5\u05d7 \u05d1\u05e7\u05e9\u05d4 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d5\u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05de\u05db\u05e9\u05d9\u05e8 \u05dc\u05d0\u05ea\u05d7\u05dc \u05d0\u05ea \u05e2\u05e6\u05de\u05d5.\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e4\u05d5\u05d2\u05e2\u05ea \u05d1\u05de\u05db\u05e9\u05d9\u05e8\u05d9 ASA \u05d5-FTD. \n\n\u05e1\u05d9\u05e1\u05e7\u05d5 \u05e4\u05e8\u05e1\u05de\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05e2\u05dd \u05e4\u05d0\u05e6', \u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75\n\nhttps://t.me/CyberSecurityIL/9803", "url": "https://t.me/CyberSecurityIL/9803", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T12:35:26.155Z", "date_only": false, "value": "2026-10-29T12:35:26.155701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3myzboysxfd2y", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e6757313-f417-48ca-a8d3-e108e3abe203", "content": "~Cybergcca~\nCisco reports CVE-2026-76418 exploited in the wild; update affected firewalls.\n-\nIOCs: CVE-2026-76418\n-\n#CVE-2026-76418 #Cisco #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3myzboysxfd2y"}, {"timestamp": "2026-10-29T12:41:45.314Z", "date_only": false, "value": "2026-10-29T12:41:45.314028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariogalarza.bsky.social/post/3myzc2ctzyy2t", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "3189a58a-08c1-4e61-a056-127c315821db", "content": "Cisco ASA/FTD zero-day CVE-2026-76418 (CVSS 8.6) under active exploit: unauthenticated requests crash SSL VPN firewalls. Patch now - details + takeaways:\nhttps://www.linkedin.com/feed/update/urn:li:share:7521551745148211200/", "url": "https://bsky.app/profile/mariogalarza.bsky.social/post/3myzc2ctzyy2t"}, {"timestamp": "2026-10-29T12:54:01Z", "date_only": false, "value": "2026-10-29T12:54:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8764", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "6139b541-b5dc-41cc-87b6-f7ad6724fbef", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a DoS, \u0432 Adaptive Security Appliance (ASA) \u0438 Threat Defense (FTD), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0432\u043e\u0434\u0430 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432.\n\nCVE-2026-76418 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c ASA \u0438 FTD \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0435 \u0441\u043b\u043e\u0432\u043e webvpn \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c SSL VPN \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c DoS, \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\nCisco \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 PSIRT \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2026 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 IOCs \u0438 \u043d\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a \u0438 \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0433\u0440\u0443\u043f\u043f\u0435 \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a VPN-\u0441\u0435\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SSL.\n\n\u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435\u0442, \u043d\u043e \u0441\u043c\u044f\u0433\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u043c\u043e\u0436\u043d\u043e, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u0433\u0440\u0443\u043f\u043f\u044b \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439 DefaultWEBVPNGroup \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438\u043b\u0438 \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u0433\u0440\u0443\u043f\u043f \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 51 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco ASA SSL VPN, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u0441\u0435\u0442\u0438, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u043d\u0435\u044f\u0441\u043d\u043e.\n\n\u041f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 CVE-2025-20362 \u0438 CVE-2025-20333 \u0432 ASA \u0438 FTD \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0443\u043b\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 ArcaneDoor, \u043a\u0430\u043a \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 CVE-2026-20349, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043b\u044f \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 ASA \u0438 FTD.", "url": "https://t.me/true_secator/8764", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T12:58:51.593Z", "date_only": false, "value": "2026-10-29T12:58:51.593176Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117524314797656352", "record": "cve-2026-76418", "field": "creation_timestamp", "uuid": "97adc2b6-db26-475b-947b-c9d1857db4fa", "content": "\ud83d\udcf0 Cisco Patches Actively Exploited Zero-Day Crashing Firewalls\nCisco patches actively exploited zero-day (CVE-2026-76418) in ASA & FTD firewalls. Unauthenticated remote attackers can cause a DoS condition by crashing devices. Patches are available now. #Cisco #ZeroDay #CyberSecurity #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-actively-exploited-firewall-zero-day-cve-2026-76418/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117524314797656352"}, {"timestamp": "2026-10-29T12:59:10.900Z", "date_only": false, "value": "2026-10-29T12:59:10.900368Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3myzczhkcoc2u", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "1d0a6b97-b751-4138-9430-a14180d3387a", "content": "Cisco patches actively exploited zero-day (CVE-2026-76418) in ASA & FTD firewalls. Unauthenticated remote attackers can cause a DoS condition by crashing devices. Patches are available now. #Cisco #ZeroDay #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3myzczhkcoc2u"}, {"timestamp": "2026-10-29T13:42:31.068Z", "date_only": false, "value": "2026-10-29T13:42:31.068130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infonewscyber.bsky.social/post/3myzfgxtmd62n", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "eca6bf87-d3c1-43bd-a3da-c6dac438f559", "content": "\u26a0\ufe0f FAILLE CRITIQUE\n\nCisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls\n\ud83d\udd0e CVE-2026-76418\n\n\ud83d\udd17 https://infonewscyber.fr/?i=083a1ea7d205dcd0\n#ZeroDay #Vuln\u00e9rabilit\u00e9 #CVE #Cisco #Cybers\u00e9curit\u00e9", "url": "https://bsky.app/profile/infonewscyber.bsky.social/post/3myzfgxtmd62n"}, {"timestamp": "2026-10-29T13:49:30.209Z", "date_only": false, "value": "2026-10-29T13:49:30.209491Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117524514046938151", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "7d0eecec-7ee0-45bf-a808-5db4bfdbcf4d", "content": "Tracked as CVE-2026-76418, this high-severity vulnerability affects devices running ASA and FTD software with configurations containing the 'webvpn' keyword and SSL VPN enabled on at least one interface. https://www.bleepingcomputer.com/news/security/cisco-warns-of-firewall-zero-day-exploited-to-crash-ssl-vpn-devices/", "url": "https://infosec.exchange/users/jbhall56/statuses/117524514046938151"}, {"timestamp": "2026-10-29T13:49:38.868Z", "date_only": false, "value": "2026-10-29T13:49:38.868516Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3myzftoet3k2c", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "9fe597a8-5d3e-4db8-9520-5c4a180bcabd", "content": "Tracked as CVE-2026-76418, this high-severity vulnerability affects devices running ASA and FTD software with configurations containing the 'webvpn' keyword and SSL VPN enabled on at least one interface. www.bleepingcomputer.com/news/securit...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3myzftoet3k2c"}, {"timestamp": "2026-10-29T13:52:32.755Z", "date_only": false, "value": "2026-10-29T13:52:32.755276Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/niztal.bsky.social/post/3myzfyvhjjw2d", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "26fdf539-ca4a-4202-acb7-d729d327a3b5", "content": "Cisco patched a high-severity flaw (CVE-2026-76418) in its ASA and FTD firewall software. Attackers reportedly exploited this zero-day in the wild to remotely crash SSL VPN devices without needing any login credentials.", "url": "https://bsky.app/profile/niztal.bsky.social/post/3myzfyvhjjw2d"}, {"timestamp": "2026-10-29T13:54:29.034Z", "date_only": false, "value": "2026-10-29T13:54:29.034207Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117524533619811135", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "dd4ab485-4f51-4815-b2f4-966e6e357006", "content": "\ud83d\udea8\ud83c\uddfa\ud83c\uddf8 Cisco firewall zero-day actively exploited to crash SSL VPN devices; CVE-2026-76418\nCisco has patched a high-severity vulnerability in Secure Firewall ASA and FTD software that allows an unauthenticated remote attacker to force affected devices to reload, causing a denial-of-service condition.\nThe flaw is triggered by a crafted request sent to the SSL VPN service when secondary authentication is configured on an affected tunnel group. A successful VPN login is not required.\u2800\u2022 CVSS: 8.6\u2022 Affected: Cisco Secure Firewall ASA and FTD with reachable SSL VPN services and secondary authentication\u2022 Fixed ASA: 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.48, 9.24.1.27 and 9.24.10.1\u2022 Fixed FTD: 7.0.11, 7.2.13, 7.4.9, 7.6.7, 7.7.14, 10.0.3 and 10.1.1\u2800Cisco confirmed active exploitation in October but did not identify the attackers, targets or scale of the activity. No complete workaround is available, and administrators are urged to install a fixed release.\nSource: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117524533619811135"}, {"timestamp": "2026-10-29T14:16:04Z", "date_only": false, "value": "2026-10-29T14:16:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/3743", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "96fa2b37-bb77-4c8e-84d8-a04ecfeac620", "content": "\ud83d\udd34 Attackers are exploiting a vulnerability in Cisco firewalls to remotely reboot devices.\n\nThe vulnerability, CVE-2026-76418, allows an attacker to send an unauthenticated request that causes the device to reboot itself.\nIt affects ASA and FTD devices.", "url": "https://t.me/pphm_HackerNews/3743", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T14:19:26.218Z", "date_only": false, "value": "2026-10-29T14:19:26.218406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3myzhixpwol2y", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "ef98101f-5b9c-4632-bbe1-bbc9bdf3d907", "content": "Cisco Patches CVE-2026-76418: Active DoS Attacks on ASA and FTD SSL VPN Firewalls", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3myzhixpwol2y"}, {"timestamp": "2026-10-29T14:39:13Z", "date_only": false, "value": "2026-10-29T14:39:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/ARcHjHfchfuPZVDOFwX4VoVCpX-9KK7MtyisQO_jf19UWJQ", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "ab8fe27c-e41b-4ec5-a51c-54df47547b79", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T14:39:13Z", "date_only": false, "value": "2026-10-29T14:39:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ARcHjHfchfuPZVDOFwX4VoVCpX-9KK7MtyisQO_jf19UWJQ", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "f2d26760-7abc-4a96-b3a1-bbbfc90fb79f"}, {"timestamp": "2026-10-29T15:08:20.008Z", "date_only": false, "value": "2026-10-29T15:08:20.008194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3myzkafwnwg2y", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "2472c0b6-3a7d-4cb9-955d-691b67d82f6b", "content": "CVE-2026-76418: Cisco ASA and FTD SSL VPN zero-day explained (affected versions, fixes,\u00a0mitigation)\n\nCVE-2026-76418 lets an unauthenticated attacker reboot Cisco ASA and FTD firewalls. See affected versions, fixed releases, mitigation and an audit script...", "url": "https://bsky.app/profile/thecybersecguru.com/post/3myzkafwnwg2y"}, {"timestamp": "2026-10-29T15:29:13.424Z", "date_only": false, "value": "2026-10-29T15:29:13.424667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thelabledger.bsky.social/post/3myzlfpytas24", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "9a99c9af-02c2-4042-9a3e-34b35c356fab", "content": "\ud83d\udea8 Cisco ASA/FTD zero-day CVE-2026-76418 is exploited to crash firewalls via SSL VPN if a tunnel group uses secondary auth. No workaround.\nwww.bleepingcomputer.com/news/securit...\n#Cisco #ZeroDay #VPN #CVE #cybersecurity", "url": "https://bsky.app/profile/thelabledger.bsky.social/post/3myzlfpytas24"}, {"timestamp": "2026-10-29T16:06:37.269Z", "date_only": false, "value": "2026-10-29T16:06:37.269461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3myznin3ijk23", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "424b093d-f3be-4327-8150-12ae5f79d742", "content": "Cisco patched CVE-2026-76418, an exploited ASA and FTD flaw, per The Hacker News. An unauthenticated request can reload the firewall when SSL VPN is exposed with secondary authentication on a tunnel group. CVSS 8.6. thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html", "url": "https://bsky.app/profile/entorisec.bsky.social/post/3myznin3ijk23"}, {"timestamp": "2026-10-29T16:30:16.636Z", "date_only": false, "value": "2026-10-29T16:30:16.636902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3myzoswosnz22", "record": "cve-2026-76418", "field": "creation_timestamp", "uuid": "71135501-052a-4045-830d-0b4b84408cdb", "content": "cisco ASA/FTD firewalls hit by zero-day CVE-2026-76418, leading to DoS via SSL VPN. Patches out since Oct 29. #infosec https://0daynews.com/articles/2026-10-29-cisco-asa-ftd-cve-2026-76418-vpn-dos-zero-day/", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3myzoswosnz22"}, {"timestamp": "2026-10-29T16:58:34.741Z", "date_only": false, "value": "2026-10-29T16:58:34.741072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatroundup.bsky.social/post/3myzqfkglwl23", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "c2dd6196-0546-4093-aeb4-d2fa04c01c0b", "content": "Attackers are crashing Cisco ASA and FTD firewalls with one crafted VPN request, Cisco says. CVE-2026-76418 needs no login and hits setups using secondary authentication. Fixed releases are out.\n\nthreatroundup.com/news/cisco-a...", "url": "https://bsky.app/profile/threatroundup.bsky.social/post/3myzqfkglwl23"}, {"timestamp": "2026-10-29T17:30:17.511Z", "date_only": false, "value": "2026-10-29T17:30:17.511988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3myzs6bdrgb2t", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "163c9d68-10b9-4ca2-b448-6e28f28014e6", "content": "Cisco ASA and FTD SSL VPNs are being actively targeted to force remote reloads. Patch CVE-2026-76418, verify failover, and keep an alternate access path ready. https://www.hexon.bot/blog/cisco-firewall-zero-day #Cybersecurity #CiscoSecurity", "url": "https://bsky.app/profile/hexonbot.bsky.social/post/3myzs6bdrgb2t"}, {"timestamp": "2026-10-29T17:48:27.463Z", "date_only": false, "value": "2026-10-29T17:48:27.463299Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3myzt6qi55522", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "c12a4e95-eb3e-4955-9977-efc2bdf7634e", "content": "Cisco says CVE-2026-76418 is being exploited against ASA/FTD Remote Access SSL VPN; crafted unauthenticated requests can reload devices. Cisco advises checking secondary-authentication settings and offers temporary mitigations.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3myzt6qi55522"}, {"timestamp": "2026-10-29T18:15:45.307Z", "date_only": false, "value": "2026-10-29T18:15:45.307660Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3myzupk5q7c2k", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "eeeadac9-c714-43be-9e86-678cf98eab01", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-97229 \u00b7 32 people\n2. CVE-2026-76418 \u00b7 28 people\n3. CVE-2026-111497 \u00b7 27 people \ud83d\udd25\n4. CVE-2026-41709 \u00b7 24 people \ud83d\udd25\n5. CVE-2026-109618 \u00b7 23 people \ud83d\udd25\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3myzupk5q7c2k"}, {"timestamp": "2026-10-29T18:15:46.348Z", "date_only": false, "value": "2026-10-29T18:15:46.348724Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3myzupkcscs2k", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "7015bf9c-8659-4b45-a6fe-29239fbd8303", "content": "2. CVE-2026-76418 \u00b7 28 people\n\ud83d\udfe7 High 8.6 \u00b7 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\n\nCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3myzupkcscs2k"}, {"timestamp": "2026-10-29T18:37:25.092Z", "date_only": false, "value": "2026-10-29T18:37:25.092131Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3myzvwbhm7225", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "b703c27f-e91f-4451-8874-92ee07f36822", "content": "Cisco patched CVE-2026-76418, an exploited flaw in ASA and FTD Remote Access SSL VPN services that lets unauthenticated remote attackers trigger firewall restarts and disrupt availability.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3myzvwbhm7225"}, {"timestamp": "2026-10-29T19:36:13.038Z", "date_only": false, "value": "2026-10-29T19:36:13.038456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3myzz7fjmz22y", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "393f9cd0-dc9d-40c8-8d95-bc0fb963e2ad", "content": "Cisco says attackers are exploiting CVE-2026-76418 to remotely crash ASA and FTD firewalls with SSL VPN enabled. It released fixes and advises disabling secondary authentication as a mitigation if patching is delayed.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3myzz7fjmz22y"}, {"timestamp": "2026-10-29T19:53:28.598Z", "date_only": false, "value": "2026-10-29T19:53:28.598915Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mz226bskiz2l", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "5aa112b2-1cc0-4c0f-a900-1d641571ede8", "content": "Security advisories 21/37\nCisco firewalls: exploited SSL VPN flaw lets attackers force reloads\n\nCVE-2026-76418 (CVSS 8.6) needs no login and hits ASA and FTD only where a tunnel group uses secondary authentication.\n\n#infosec #cybersecurity\ntrustlist.uk/security-advisorie\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mz226bskiz2l"}, {"timestamp": "2026-10-29T20:00:01Z", "date_only": false, "value": "2026-10-29T20:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-76418", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "59f5cef5-7296-4153-8903-cf02fcef7612", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T20:00:02.660Z", "date_only": false, "value": "2026-10-29T20:00:02.660655Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59f5cef5-7296-4153-8903-cf02fcef7612", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "6f2f1b77-03f6-43ec-8558-7b9c300211c7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59f5cef5-7296-4153-8903-cf02fcef7612", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T20:00:29.874Z", "date_only": false, "value": "2026-10-29T20:00:29.874945Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46a2a883-149c-4b66-b54f-6a0e6a08d88e", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e880debc-9cdd-4e97-8b13-0a9b9c4e9f0c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46a2a883-149c-4b66-b54f-6a0e6a08d88e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T20:28:55.954Z", "date_only": false, "value": "2026-10-29T20:28:55.954920Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mz245oyfk42i", "record": "cve-2026-76418", "field": "creation_timestamp", "uuid": "85d17071-68cf-4d1e-acb7-38fd988e2c75", "content": "Cisco fixes high-severity in ASA and FTD SSL VPN under active exploitation.\nCVE-2026-76418 triggers reloads via crafted requests when secondary auth is enabled.\n\nthecircuitry.to/article/cisa-adds-exploited-cisco-asa-and-ftd-vpn-crash-flaw-cve-2026-76418-to-kev-mvtzo3mg", "url": "https://bsky.app/profile/thecircuitry.to/post/3mz245oyfk42i"}, {"timestamp": "2026-10-29T20:55:05.674Z", "date_only": false, "value": "2026-10-29T20:55:05.674692Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnidx-jp.bsky.social/post/3mz25mhsktd2y", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "99404987-193c-4fcd-b8d2-fd7b8a7809e2", "content": "\u3010\u60aa\u7528\u78ba\u8a8d\u3011CVE-2026-76418\nCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerab\u2026\nCisco Secure Firewall ASA Software and Cisco Secure FTD Software\nCISA \u8ffd\u52a0 10/29\u30fb\u5bfe\u5fdc\u671f\u9650 11/1\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-76418\n#\u8106\u5f31\u6027 #KEV #Cisco", "url": "https://bsky.app/profile/vulnidx-jp.bsky.social/post/3mz25mhsktd2y"}, {"timestamp": "2026-10-29T21:04:12.800Z", "date_only": false, "value": "2026-10-29T21:04:12.800851Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mz264qrbio2w", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "204be9f5-3ea8-40e1-9c2f-89595dbd4514", "content": "Cisco ASA and FTD Firewalls Under Active Attack as Hackers Exploit CVE-2026-76418 to Trigger Remote Crashes +\u00a0Video\n\nIntroduction: A Firewall That Can Be Taken Down Remotely Is Already a Serious Security Concern Cisco has warned that attackers are actively exploiting a vulnerability affecting\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mz264qrbio2w"}, {"timestamp": "2026-10-29T21:20:05.499Z", "date_only": false, "value": "2026-10-29T21:20:05.499473Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mz26z5ivyn2k", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "05495638-d323-4a1c-8cc7-73f2897e7063", "content": "CISA added CVE-2026-76418 to its Known Exploited Vulnerabilities list (2026-10-29).\nCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference\nEPSS today: 0.006 (no score 30 days earlier)\n#infosec #KEV", "url": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mz26z5ivyn2k"}, {"timestamp": "2026-10-29T21:31:24Z", "date_only": false, "value": "2026-10-29T21:31:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3WHV-82G3-5CWX", "record": "GHSA-3WHV-82G3-5CWX", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T22:11:57.939Z", "date_only": false, "value": "2026-10-29T22:11:57.939058Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mz2bvvz4px2f", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "367b2381-f105-4c5b-9c2a-79c972c1ccfe", "content": "Cisco fixed a high-severity flaw in ASA and FTD SSL VPN that's under active exploitation, and CISA added it to its exploited-vulnerabilities list.\n\nCVE-2026-76418 lets a crafted request force a reload when secondary auth is configured.\n\nthecircuitry.to/article/cisa-adds-exploited-cisco-asa-and-ft...", "url": "https://bsky.app/profile/thecircuitry.to/post/3mz2bvvz4px2f"}, {"timestamp": "2026-10-29T22:15:07.399Z", "date_only": false, "value": "2026-10-29T22:15:07.399489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mz2c3lapyd2z", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "6dbc6c14-969a-4d21-982c-762a713496cf", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nCisco Secure Firewall ASA Software and Cisco Secure FTD Soft: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to\nCVE-2026-76418 \u00b7 patch by 2026-11-01\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2026-76418\n#KEV #cybersec", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mz2c3lapyd2z"}, {"timestamp": "2026-10-30T02:24:10.589Z", "date_only": false, "value": "2026-10-30T02:24:10.589474Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mz2pyupbfc2p", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "8a391bcf-47fb-4ac7-bb23-3ddafd13ddbe", "content": "Cisco says CVE-2026-76418 is actively exploited. A crafted unauthenticated request can reload affected ASA or FTD firewalls when SSL remote access and secondary authentication are configured. Cisco released fixes; no RCE or data theft is confirmed.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mz2pyupbfc2p"}, {"timestamp": "2026-10-30T02:49:11.695Z", "date_only": false, "value": "2026-10-30T02:49:11.695787Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mz2rfnewum2s", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "8d302c46-ccc0-4561-9024-8557f3314b27", "content": "Cisco Secure Firewall Vulnerability CVE-2026-76418 Actively Exploited, Could Crash ASA and FTD\u00a0Devices\n\nCritical security attention Actively exploited October 29, 2026 A newly disclosed vulnerability in Cisco Secure Firewall products is putting enterprise network infrastructure at risk after\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mz2rfnewum2s"}, {"timestamp": "2026-10-30T03:55:57.976Z", "date_only": false, "value": "2026-10-30T03:55:57.976Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-76418", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T03:55:57.976Z", "date_only": false, "value": "2026-10-30T03:55:57.976Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76418", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T04:01:14.126Z", "date_only": false, "value": "2026-10-30T04:01:14.126805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mz2vghx6pt2m", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "070bcea0-350c-4acd-980d-9ba70b2b16b9", "content": "~Cisa~\nCISA added actively exploited GitLab and Cisco Secure Firewall vulnerabilities to its KEV Catalog.\n-\nIOCs: CVE-2026-97229, CVE-2026-76418\n-\n#CISA #KEV #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mz2vghx6pt2m"}, {"timestamp": "2026-10-30T05:02:24.074Z", "date_only": false, "value": "2026-10-30T05:02:24.074886Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz2yttpvmv2q", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "2745f665-4335-4db4-b981-258211161075", "content": "BREAKING: Cisco ASA/FTD zero-day CVE-2026-76418 actively exploited in the wild \u2014 unauthenticated remote attackers crash SSL VPN devices via crafted requests. 51K+ devices exposed online. Patch now or disable secondary auth on DefaultWEBVPNGroup. #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz2yttpvmv2q"}, {"timestamp": "2026-10-30T05:02:41.384Z", "date_only": false, "value": "2026-10-30T05:02:41.384790Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz2yuei3g42t", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "285cf445-b53f-420c-b823-d26ef9ccdab7", "content": "BREAKING: Cisco ASA/FTD zero-day CVE-2026-76418 actively exploited in the wild \u2014 unauthenticated remote attackers crash SSL VPN devices via crafted requests. 51K+ devices exposed online. Patch now or disable secondary auth on DefaultWEBVPNGroup. #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz2yuei3g42t"}, {"timestamp": "2026-10-30T06:30:28.014Z", "date_only": false, "value": "2026-10-30T06:30:28.014604Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mz35rddo7p2z", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "86fcb9f9-e3a9-49d7-9733-90b08cabc43b", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-76418: \u26a0\ufe0f CVE-2026-76418: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.6%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-76418-a-vulnerability-in-the-remote-access", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mz35rddo7p2z"}, {"timestamp": "2026-10-30T06:59:24.124Z", "date_only": false, "value": "2026-10-30T06:59:24.124197Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mz37daoazkmr", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e1671d82-46f2-48fc-a31a-16e2bb3fc61b", "content": "\u30b7\u30b9\u30b3\u88fd\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306b\u65b0\u305f\u306aDoS\u306e\u30bc\u30ed\u30c7\u30a4\u3001\u30b7\u30b9\u30b3\u306f10\u6708\u306b\u60aa\u7528\u8a8d\u8b58\uff1aCVE-2026-76418 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/48322/", "url": "https://bsky.app/profile/shiojiri.com/post/3mz37daoazkmr"}, {"timestamp": "2026-10-30T08:00:20.889Z", "date_only": false, "value": "2026-10-30T08:00:20.889137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/duonggiakhanh.com/post/3mz3crzmpln22", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "2919c232-2f22-4008-8e76-608a213328a5", "content": "Patch your Cisco ASA/FTD \ud83d\udd25 CVE-2026-76418 (CVSS 8.6) lets an unauthenticated remote attacker reload the firewall if SSL VPN secondary auth is on. Cisco says it's exploited in the wild. DoS only, no RCE reported, but a VPN that keeps rebooting is an outage. #infosec #netsec", "url": "https://bsky.app/profile/duonggiakhanh.com/post/3mz3crzmpln22"}, {"timestamp": "2026-10-30T08:15:58.680Z", "date_only": false, "value": "2026-10-30T08:15:58.680320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mz3dnyf6uw27", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "b75c0321-4651-4081-821a-8b9a0b5bb9ba", "content": "\ud83d\udd34 Exploitation confirm\u00e9e (CISA KEV, ajouts du 29/10) \u00b7 2\n\u2022 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software CVE-2026-76418, CVSS 8.6\n\u2022 GitLab Community Edition and Enterprise Edition CVE-2026-97229, CVSS 10.0", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mz3dnyf6uw27"}, {"timestamp": "2026-10-30T08:25:32.499Z", "date_only": false, "value": "2026-10-30T08:25:32.499991Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mz3e73mnqk2n", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "0204a450-6128-4593-ba5b-903d983a66c9", "content": "[1/2] Cisco ASA/FTD CVE-2026-76418 (CVSS 8.6) sfruttata in the wild: attaccante non autenticato fa riavviare il firewall via SSL VPN. Colpiti solo i tunnel group con secondary authentication (DefaultWEBVPNGroup incluso). #infosec", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mz3e73mnqk2n"}, {"timestamp": "2026-10-30T08:25:32.965Z", "date_only": false, "value": "2026-10-30T08:25:32.965076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mz3e73myic2n", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "fdef78ba-0c4b-4f17-82eb-2a0b48624070", "content": "[1/2] Cisco ASA/FTD CVE-2026-76418 (CVSS 8.6) sfruttata in the wild: attaccante non autenticato fa riavviare il firewall via SSL VPN. Colpiti solo i tunnel group con secondary authentication (DefaultWEBVPNGroup incluso). #infosec", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mz3e73myic2n"}, {"timestamp": "2026-10-30T09:00:08.054Z", "date_only": false, "value": "2026-10-30T09:00:08.054754Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mz3g4xewcs2d", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "a7a8711c-30ef-4252-94ec-fe3e58671194", "content": "\ud83d\udce2 [VULN] CISA : une faille GitLab CVSS 10 et un bug Cisco exploit\u00e9s - CVE-2026-97229 CVE-2026-76418\n\nL\u2019agence am\u00e9ricaine CISA a ajout\u00e9 jeudi deux vuln\u00e9rabilit\u00e9s \u00e0 son catalogue KEV. Ce registre recense, en effet, les failles exploit\u00e9es activement par des attaquants.\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mz3g4xewcs2d"}, {"timestamp": "2026-10-30T10:36:01.130Z", "date_only": false, "value": "2026-10-30T10:36:01.130", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76418", "record": "FKIE_CVE-2026-76418", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T12:07:06Z", "date_only": false, "value": "2026-10-30T12:07:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/3747", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "dde9a180-6e18-4f0f-8e1f-16fa77fd5350", "content": "\ud83d\udd34 CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.\n\nThe vulnerabilities are listed below:\n\n\ud83d\udd3a CVE-2026-97229 (CVSS score: 10.0) - An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise Edition that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration due to insufficient regular expression validation.\n\n\ud83d\udd3a CVE-2026-76418 (CVSS score: 8.6) - An unchecked return value to NULL pointer dereference vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial-of-service (DoS) condition.", "url": "https://t.me/pphm_HackerNews/3747", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-30T12:10:38.439Z", "date_only": false, "value": "2026-10-30T12:10:38.439296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kpulse360.bsky.social/post/3mz3qrjw5ffmq", "record": "cve-2026-76418", "field": "creation_timestamp", "uuid": "1d6ace44-a1b8-4800-8344-50bc732e7976", "content": "Faille Cisco CVE-2026-76418 activement exploit\u00e9e selon le CERT-FR\n\nLe CERT-FR alerte sur une faille Cisco activement exploit\u00e9e permettant un d\u00e9ni de\u2026\n\nhttps://infos.kanibal-studio.com/faille-cisco-cve-2026-76418-activement-exploitee-selon-le-cert-fr-b2009c\n\n#CERTFR #CiscoCVE202676418 #Cybersecurite", "url": "https://bsky.app/profile/kpulse360.bsky.social/post/3mz3qrjw5ffmq"}, {"timestamp": "2026-10-30T13:00:16.013Z", "date_only": false, "value": "2026-10-30T13:00:16.013421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mtcgroupllc.bsky.social/post/3mz3tkdaoea2i", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "5561585c-43a8-4b66-a3c6-c55f0c26f297", "content": "Exploited now: CVE-2026-76418 in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software. Added to CISA KEV Oct 29, 2026. CVSS 8.6. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Thr\u2026\n\n#cybersecurity #infosec\n\ninfosecsignals.com/cves/CVE-2026-76418\n#healthcare #KEV", "url": "https://bsky.app/profile/mtcgroupllc.bsky.social/post/3mz3tkdaoea2i"}, {"timestamp": "2026-10-30T13:11:44Z", "date_only": false, "value": "2026-10-30T13:11:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0463", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "62fa3679-563d-45fb-946b-359ba8f689bf", "content": "Cisco heeft een ernstige kwetsbaarheid verholpen in Cisco Secure Firewall Adaptive Security Appliance (ASA) en Cisco Secure Firewall Threat Defense (FTD). Cisco bevestigt dat de kwetsbaarheid actief wordt misbruikt. Deze kwetsbaarheid met kenmerk CVE-2026-76418 heeft een CVSS-score van 8.6 en bevindt zich in de Remote Access SSL VPN-functionaliteit. Een niet-geauthenticeerde kwaadwillende kan de kwetsbaarheid op afstand misbruiken door een speciaal vervaardigd verzoek naar de VPN-dienst te versturen. Hierdoor kan het getroffen apparaat onverwacht herstarten, wat kan leiden tot een Denial-of-Service (DoS) en verstoring van de dienstverlening.\n\nVoor succesvol misbruik moet de SSL VPN-dienst bereikbaar zijn en secundaire authenticatie zijn geconfigureerd voor een VPN-tunnelgroep. Een succesvolle VPN-aanmelding is niet vereist.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0463"}, {"timestamp": "2026-10-30T14:11:44.339Z", "date_only": false, "value": "2026-10-30T14:11:44.339772Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0463", "record": "NCSC-2026-0463", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-30T14:11:44.339Z", "date_only": false, "value": "2026-10-30T14:11:44.339772Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0463", "record": "NCSC-2026-0463", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T14:11:44.339Z", "date_only": false, "value": "2026-10-30T14:11:44.339772Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0463", "record": "NCSC-2026-0463", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-30T15:01:44.654Z", "date_only": false, "value": "2026-10-30T15:01:44.654622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mz42dkmd262b", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "db1f36d2-b57d-4fe1-b696-c844fc6cde8c", "content": "\ud83d\udd34 EXPLOITED\n\nCVE-2026-76418: An unauthenticated remote attacker can force Cisco Secure Firewall ASA and FTD devices running Remote Access SSL VPN to reload, causing denial of service. Listed in CISA KEV. Apply Cisco's fixed releases; federal due date is November 1.", "url": "https://bsky.app/profile/suriq.io/post/3mz42dkmd262b"}, {"timestamp": "2026-10-30T15:30:22.345Z", "date_only": false, "value": "2026-10-30T15:30:22.345543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/duonggiakhanh.com/post/3mz43wqdkkn2i", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "d52f0397-193d-4192-be73-0709cdab5de0", "content": "Friday in infosec: attackers finally learned IT's #1 troubleshooting step \ud83d\udc80 CVE-2026-76418 lets them reboot Cisco ASA/FTD firewalls with SSL VPN secondary auth, no login needed. Patch before your firewall starts \"fixing itself\". #cybersecurity #netsec", "url": "https://bsky.app/profile/duonggiakhanh.com/post/3mz43wqdkkn2i"}, {"timestamp": "2026-10-30T16:43:21.317Z", "date_only": false, "value": "2026-10-30T16:43:21.317714Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mz47zatbjr2l", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "08bd8962-0794-4430-9668-f500f8e6d2f8", "content": "CVE-2026-76418 is trending. Hype score 14, currently #7 on cvemon.\n\nA vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76418", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mz47zatbjr2l"}, {"timestamp": "2026-10-30T18:15:33.613Z", "date_only": false, "value": "2026-10-30T18:15:33.613106Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117531222499851578", "record": "cve-2026-76418", "field": "creation_timestamp", "uuid": "c6043ec8-d777-41d4-a567-73181becdd54", "content": "\ud83d\udcf0 Cisco Patches Actively Exploited Zero-Day Crashing Firewalls\nCisco patches actively exploited zero-day (CVE-2026-76418) in ASA & FTD firewalls. Unauthenticated remote attackers can cause a DoS condition by crashing devices. Patches are available now. #Cisco #ZeroDay #CyberSecurity #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-actively-exploited-firewall-zero-day-cve-2026-76418/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117531222499851578"}, {"timestamp": "2026-10-30T18:15:56.784Z", "date_only": false, "value": "2026-10-30T18:15:56.784100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mz4f6t6kur2a", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e45d296d-2d1a-45b3-bde9-df1455b08af1", "content": "Cisco patches actively exploited zero-day (CVE-2026-76418) in ASA & FTD firewalls. Unauthenticated remote attackers can cause a DoS condition by crashing devices. Patches are available now. #Cisco #ZeroDay #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mz4f6t6kur2a"}, {"timestamp": "2026-10-30T18:15:59.568Z", "date_only": false, "value": "2026-10-30T18:15:59.568419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mz4f6v25a22s", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "6cf26e27-e265-4d3c-998a-ea3f1852436c", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-98432 \u00b7 90 people\n2. CVE-2026-97229 \u00b7 26 people \ud83d\udd25\n3. CVE-2026-76418 \u00b7 20 people \ud83d\udd25\n4. CVE-2026-109618 \u00b7 15 people \ud83d\udd25\n5. CVE-2026-118539 \u00b7 14 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mz4f6v25a22s"}, {"timestamp": "2026-10-30T18:16:01.056Z", "date_only": false, "value": "2026-10-30T18:16:01.056274Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mz4f6vccx22s", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "4c968e44-596b-48e0-ae5b-869711b62d32", "content": "3. CVE-2026-76418 \u00b7 20 people \ud83d\udd25\n\ud83d\udfe7 High 8.6 \u00b7 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\n\nCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mz4f6vccx22s"}, {"timestamp": "2026-10-30T18:34:45.097Z", "date_only": false, "value": "2026-10-30T18:34:45.097981Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wirebrief.bsky.social/post/3mz4gagbbp22g", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "4a0dd976-1ca1-409b-9fdb-966fe08a452d", "content": "CISA's KEV feed added two more today (catalog 2026.10.30), so 10 exploited flaws have been added since Mon 26 Oct, this GitLab CVE-2026-97229 and Cisco's ASA/FTD CVE-2026-76418 among them. That meets our logged 65% call for a 10+ week by 22 Nov.", "url": "https://bsky.app/profile/wirebrief.bsky.social/post/3mz4gagbbp22g"}, {"timestamp": "2026-10-31T02:07:07.506Z", "date_only": false, "value": "2026-10-31T02:07:07.506245Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mz57jdpxav24", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "b6160798-bf07-4d88-9686-63aabc2a1d11", "content": "\ud83d\udccc CVE-2026-76418 - A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Thr... https://www.cyberhub.blog/cves/CVE-2026-76418", "url": "https://bsky.app/profile/cyberhub.blog/post/3mz57jdpxav24"}, {"timestamp": "2026-10-31T07:01:11.387Z", "date_only": false, "value": "2026-10-31T07:01:11.387597Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mz5px6cusb2b", "record": "cve-2026-76418", "field": "creation_timestamp", "uuid": "8db13748-1c29-4dcf-a41e-7c52c27cf519", "content": "\ud83d\udcf0 Cisco Peringatkan Celah Zero-Day CVE-2026-76418, Hacker Bisa Membuat Firewall ASA dan FTD Crash\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/31/cisco-cve-2026-76418-zero-day-firewall-asa-ftd/\n\n#cisco #cve #cybersecurity #firewall #keamananSiber #sslVpn #vulnerability #zero-day", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mz5px6cusb2b"}, {"timestamp": "2026-10-31T07:27:37.296Z", "date_only": false, "value": "2026-10-31T07:27:37.296472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mz5rgh2wkb2r", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "e44fe830-294a-450b-b1c4-f0ba769c387e", "content": "Top 3 CVE for last 7 days:\nCVE-2026-98432: 433 interactions\nCVE-2026-111497: 235 interactions\nCVE-2026-109618: 211 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-98432: 362 interactions\nCVE-2026-109618: 11 interactions\nCVE-2026-76418: 10 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mz5rgh2wkb2r"}, {"timestamp": "2026-10-31T08:00:04.264Z", "date_only": false, "value": "2026-10-31T08:00:04.264104Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mz5tahgq5a24", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "3056d45a-dec9-4876-b901-eb3adfc709f3", "content": "New in the known-exploited catalogue: CVE-2026-76418. Exploited in the wild \u2014 the only phrase in this field that still means exactly what it says.\n\nPatch the edge appliance. It is always the edge appliance.", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mz5tahgq5a24"}, {"timestamp": "2026-10-31T12:57:32.548Z", "date_only": false, "value": "2026-10-31T12:57:32.548682Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz6dufaix62i", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "4e2f59d3-eb20-4823-87ac-2a39b83f4a15", "content": "BREAKING: Cisco ASA/FTD zero-day CVE-2026-76418 actively exploited in the wild \u2014 unauthenticated remote attackers crash SSL VPN devices via crafted requests. 51K+ devices exposed online. Patch now or disable secondary auth on DefaultWEBVPNGroup. #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz6dufaix62i"}, {"timestamp": "2026-10-31T21:49:30.764Z", "date_only": false, "value": "2026-10-31T21:49:30.764313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz7blmq57n2c", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "ba1aaac5-2dd0-4005-866a-ee7978f30efe", "content": "BREAKING: Cisco ASA/FTD zero-day CVE-2026-76418 actively exploited in the wild \u2014 unauthenticated remote attackers crash SSL VPN devices via crafted requests. 51K+ devices exposed online. Patch now or disable secondary auth on DefaultWEBVPNGroup. #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz7blmq57n2c"}, {"timestamp": "2026-10-31T22:00:31.333Z", "date_only": false, "value": "2026-10-31T22:00:31.333093Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz7c7cwphi2b", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "f21d4b0c-864c-4fba-8f6c-8e094ca2ffb2", "content": "BREAKING: Cisco ASA/FTD zero-day CVE-2026-76418 actively exploited in the wild \u2014 unauthenticated remote attackers crash SSL VPN devices via crafted requests. 51K+ devices exposed online. Patch now or disable secondary auth on DefaultWEBVPNGroup. #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mz7c7cwphi2b"}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": true, "value": "2026-11-01", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-76418", "field": "evidence.0.details.due_date", "uuid": "59f5cef5-7296-4153-8903-cf02fcef7612", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-02T06:05:05Z", "date_only": false, "value": "2026-11-02T06:05:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/2368", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "3bbc3955-70f5-47c3-a76a-7a2169dcf59b", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT, \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 (\u0438 \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e Binance) \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u2755\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e NethamLoader \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043e \u0432 \u043e\u0441\u043e\u0431\u0443\u044e \u0441\u0431\u043e\u0440\u043a\u0443 Windows 10, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0432 \u0410\u0437\u0438\u0438. \u0412\u041f\u041e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 Patch My PC, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c\u0438 Microsoft. \u041e\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0442\u0447\u0438\u0442 AMSI \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430 \u043d\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \n\n\ud83d\udfe1APT UAT-11473 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 Cisco SD-WAN (CVE-2026-20127) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0412\u041f\u041e KeyDrift, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043a\u0440\u0430\u0434\u0451\u0442 \u043a\u043b\u044e\u0447\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 control plane. \u0421\u0440\u0435\u0434\u0438 \u0446\u0435\u043b\u0435\u0439 \u2014 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437 \u043e\u0431\u043e\u0440\u043e\u043d\u043a\u0438 \u0438 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043d\u0442\u0440\u044b. \u0418\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0435\u0442\u044c\u044e Silent Train \u0433\u0440\u0443\u043f\u043f\u044b Volt Typhoon.\n\n\ud83d\udfe3\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b PHP4Shell \u0438 Fragnesia, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root \u043d\u0430 25 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430\u0445 PAN-OS. \u0417\u0430\u0442\u0435\u043c \u043e\u043d\u0438 \u0440\u0430\u0437\u0432\u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445 \u0438 Active Directory. \u0416\u0435\u0440\u0442\u0432\u044b \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u0421\u0428\u0410, \u042f\u043f\u043e\u043d\u0438\u0438, \u0422\u0430\u0439\u0432\u0430\u043d\u0435 \u0438 \u042e\u0436\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0435. \n\n\ud83d\udfe3\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432 Microsoft Teams (\u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e), \u0432\u044b\u0434\u0430\u0432\u0430\u044f \u0441\u0435\u0431\u044f \u0437\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0438 \u0443\u0431\u0435\u0436\u0434\u0430\u044f \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Quick Assist \u0438\u043b\u0438 AnyDesk. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 400 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0445 \u043a \u0430\u0442\u0430\u043a\u0430\u043c Black Basta, Cactus, 3AM \u0438 Chaos ransomware. \n\n\ud83d\udd35\u041e\u0431\u0437\u043e\u0440 TTPs Qilin, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0439\u0448\u0438\u0445 RaaS 2025 \u0433\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 1000 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432. \u0415\u0451 \u0412\u041f\u041e \u043d\u0430 Rust \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043e \u043d\u0430 VMware ESXi, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441\u043c\u0435\u043d\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0445\u043e\u0441\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 SSH \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0447\u0435\u0440\u0435\u0437 vCenter. \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0421\u0435\u0432\u0435\u0440\u043d\u0443\u044e \u0410\u043c\u0435\u0440\u0438\u043a\u0443 \u0438 \u0415\u0432\u0440\u043e\u043f\u0443, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0441\u0442\u0440\u0430\u0434\u0430\u0435\u0442 \u0441\u0435\u043a\u0442\u043e\u0440 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f. \n\n\ud83d\udfe3Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2026-76418) \u0432 SSL VPN \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Secure Firewall ASA \u0438 FTD. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \n\n\ud83d\udfe2\u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f Gheist \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (workflows), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0432 run log. \u0411\u044b\u043b\u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u044b \u0431\u043e\u043b\u0435\u0435 13500 \u0432\u0435\u0442\u043e\u043a \u0432 850 \u0430\u043a\u043a\u0443\u0430\u043d\u0442\u0430\u0445, \u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u043f\u043e \u0438 \u043d\u0430 Enterprise server. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u043e\u0432\u044b\u043c\u0438 \u043c\u0435\u0440\u0430\u043c\u0438 GitHub \u0441 28 \u0438\u044e\u043b\u044f. \n\n\ud83d\udfe2\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e \u0443\u0433\u043e\u043d\u0443 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432\u0435\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 319 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Chrome c 13,4 \u043c\u043b\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a. \u042d\u0442\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043d\u0438 \u043a\u043e\u0434\u0430, \u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0432 manifest \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0440\u0430\u0434\u0438 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0445\u043e\u0434\u0430. \u0412 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0442\u0430\u043a\u0438\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0432\u0435\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430 \u0444\u0438\u0448\u0438\u043d\u0433 \u0438\u043b\u0438 ClicFix. \n\n\ud83d\udfe2\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0438\u0441\u0442\u043e\u0440\u0438\u0438 Discover-Tech, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435. \u0420\u0435\u043a\u043b\u0430\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u0436\u0435\u0440\u0442\u0432\u0430\u043c, \u043f\u043e\u0431\u0435\u0434\u0438\u043b\u0430 \u0432\u043e\u043e\u0431\u0449\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Starlink \u0432 105 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435, \u0433\u0434\u0435 \u0441\u0435\u0440\u0432\u0438\u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d. \u0412 \u0446\u0435\u043b\u043e\u043c Discover-Tech \u0441\u0442\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u043c \u0438\u0433\u0440\u043e\u043a\u043e\u043c \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u044b\u0445 \u0430\u0443\u043a\u0446\u0438\u043e\u043d\u043e\u0432 \u0432 49 \u0441\u0442\u0440\u0430\u043d\u0430\u0445.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2368", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-02T06:05:05Z", "date_only": false, "value": "2026-11-02T06:05:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/2368", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "019f42c9-0e22-4d01-a57c-7e01d667613c", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT, \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 (\u0438 \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e Binance) \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u2755\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e NethamLoader \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043e \u0432 \u043e\u0441\u043e\u0431\u0443\u044e \u0441\u0431\u043e\u0440\u043a\u0443 Windows 10, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0432 \u0410\u0437\u0438\u0438. \u0412\u041f\u041e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 Patch My PC, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c\u0438 Microsoft. \u041e\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0442\u0447\u0438\u0442 AMSI \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430 \u043d\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \n\n\ud83d\udfe1APT UAT-11473 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 Cisco SD-WAN (CVE-2026-20127) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0412\u041f\u041e KeyDrift, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043a\u0440\u0430\u0434\u0451\u0442 \u043a\u043b\u044e\u0447\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 control plane. \u0421\u0440\u0435\u0434\u0438 \u0446\u0435\u043b\u0435\u0439 \u2014 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437 \u043e\u0431\u043e\u0440\u043e\u043d\u043a\u0438 \u0438 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043d\u0442\u0440\u044b. \u0418\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0435\u0442\u044c\u044e Silent Train \u0433\u0440\u0443\u043f\u043f\u044b Volt Typhoon.\n\n\ud83d\udfe3\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b PHP4Shell \u0438 Fragnesia, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root \u043d\u0430 25 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430\u0445 PAN-OS. \u0417\u0430\u0442\u0435\u043c \u043e\u043d\u0438 \u0440\u0430\u0437\u0432\u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445 \u0438 Active Directory. \u0416\u0435\u0440\u0442\u0432\u044b \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u0421\u0428\u0410, \u042f\u043f\u043e\u043d\u0438\u0438, \u0422\u0430\u0439\u0432\u0430\u043d\u0435 \u0438 \u042e\u0436\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0435. \n\n\ud83d\udfe3\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432 Microsoft Teams (\u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e), \u0432\u044b\u0434\u0430\u0432\u0430\u044f \u0441\u0435\u0431\u044f \u0437\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0438 \u0443\u0431\u0435\u0436\u0434\u0430\u044f \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Quick Assist \u0438\u043b\u0438 AnyDesk. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 400 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0445 \u043a \u0430\u0442\u0430\u043a\u0430\u043c Black Basta, Cactus, 3AM \u0438 Chaos ransomware. \n\n\ud83d\udd35\u041e\u0431\u0437\u043e\u0440 TTPs Qilin, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0439\u0448\u0438\u0445 RaaS 2025 \u0433\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 1000 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432. \u0415\u0451 \u0412\u041f\u041e \u043d\u0430 Rust \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043e \u043d\u0430 VMware ESXi, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441\u043c\u0435\u043d\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0445\u043e\u0441\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 SSH \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0447\u0435\u0440\u0435\u0437 vCenter. \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0421\u0435\u0432\u0435\u0440\u043d\u0443\u044e \u0410\u043c\u0435\u0440\u0438\u043a\u0443 \u0438 \u0415\u0432\u0440\u043e\u043f\u0443, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0441\u0442\u0440\u0430\u0434\u0430\u0435\u0442 \u0441\u0435\u043a\u0442\u043e\u0440 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f. \n\n\ud83d\udfe3Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2026-76418) \u0432 SSL VPN \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Secure Firewall ASA \u0438 FTD. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \n\n\ud83d\udfe2\u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f Gheist \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (workflows), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0432 run log. \u0411\u044b\u043b\u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u044b \u0431\u043e\u043b\u0435\u0435 13500 \u0432\u0435\u0442\u043e\u043a \u0432 850 \u0430\u043a\u043a\u0443\u0430\u043d\u0442\u0430\u0445, \u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u043f\u043e \u0438 \u043d\u0430 Enterprise server. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u043e\u0432\u044b\u043c\u0438 \u043c\u0435\u0440\u0430\u043c\u0438 GitHub \u0441 28 \u0438\u044e\u043b\u044f. \n\n\ud83d\udfe2\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e \u0443\u0433\u043e\u043d\u0443 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432\u0435\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 319 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Chrome c 13,4 \u043c\u043b\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a. \u042d\u0442\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043d\u0438 \u043a\u043e\u0434\u0430, \u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0432 manifest \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0440\u0430\u0434\u0438 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0445\u043e\u0434\u0430. \u0412 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0442\u0430\u043a\u0438\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0432\u0435\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430 \u0444\u0438\u0448\u0438\u043d\u0433 \u0438\u043b\u0438 ClicFix. \n\n\ud83d\udfe2\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0438\u0441\u0442\u043e\u0440\u0438\u0438 Discover-Tech, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435. \u0420\u0435\u043a\u043b\u0430\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u0436\u0435\u0440\u0442\u0432\u0430\u043c, \u043f\u043e\u0431\u0435\u0434\u0438\u043b\u0430 \u0432\u043e\u043e\u0431\u0449\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Starlink \u0432 105 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435, \u0433\u0434\u0435 \u0441\u0435\u0440\u0432\u0438\u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d. \u0412 \u0446\u0435\u043b\u043e\u043c Discover-Tech \u0441\u0442\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u043c \u0438\u0433\u0440\u043e\u043a\u043e\u043c \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u044b\u0445 \u0430\u0443\u043a\u0446\u0438\u043e\u043d\u043e\u0432 \u0432 49 \u0441\u0442\u0440\u0430\u043d\u0430\u0445.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2368"}, {"timestamp": "2026-11-02T09:00:08.972Z", "date_only": false, "value": "2026-11-02T09:00:08.972020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mzcxjpj57g2i", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "0b5e7e1e-2d41-4120-b051-d6082fdc2be1", "content": "Cisco ASA and FTD firewalls: one crafted SSL VPN request can reload the device. CVE-2026-76418, CVSS 8.6, exploited, CISA KEV. Check tunnel groups for secondary authentication, then patch. #Cisco #CyberSecurity\n\ud83c\uddec\ud83c\udde7 diesec.com/2026/11/cisc...\n\ud83c\udde9\ud83c\uddea diesec.com/de/2026/11/c...", "url": "https://bsky.app/profile/diesec.bsky.social/post/3mzcxjpj57g2i"}, {"timestamp": "2026-11-03T11:06:09.356Z", "date_only": false, "value": "2026-11-03T11:06:09.356143Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mzfozxvbdh23", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "9abd897b-cdf7-4f32-b36f-6975b68ea661", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-76418: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tun\u2026\nCVSS 8.6 \u00b7 EPSS 0.8% \u00b7 CISA KEV \u00b7 0day\nhttps://vulnsea.com/cve/CVE-2026-76418\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mzfozxvbdh23"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-76418", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T16:44:57.163Z", "date_only": false, "value": "2026-11-04T16:44:57.163411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzisgnx4fefv", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "0cd2ea94-96c9-49b4-b2ff-a18a6c3d4e91", "content": "CISA KEV | CVE-2026-76418 | Cisco / Secure Firewall ASA Software and Cisco Secure FTD Software\n\nCISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance.\n\nSource: CISA KEV\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1367", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzisgnx4fefv"}, {"timestamp": "2026-11-05T13:32:29.203Z", "date_only": false, "value": "2026-11-05T13:32:29.203650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xploitdigest-kev.bsky.social/post/3mzky5i2sri2f", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "86cc6acb-2c07-4b81-8986-7637118b70aa", "content": "Do you run Cisco Secure Firewall ASA Software and Cisco Secure FTD Software?\n\nCISA lists CVE-2026-76418 as exploited (added 29 Oct 2026).\n\nCan it reach you? Over a network, with no login and no click. CVSS 8.6.\n\nPlain-English breakdown:\nxploitdigest.com/kev/CVE-2026-76418\n\n#Cisco #CyberSecurity", "url": "https://bsky.app/profile/xploitdigest-kev.bsky.social/post/3mzky5i2sri2f"}, {"timestamp": "2026-11-06T04:48:11.072Z", "date_only": false, "value": "2026-11-06T04:48:11.072997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mzmlctltac24", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "8ba3ca24-02d7-4277-a132-659cac2e934f", "content": "\u3010\u7dca\u6025\u3011Cisco\u306eASA\uff0fFTD\uff08CVE-2026-76418\uff09\u304cCISA\u306eKEV\u306b\u8ffd\u52a0\uff08CVSS 8.6\uff09\n\nSSL VPN\u3067\u4e8c\u6b21\u8a8d\u8a3c\u3092\u8a2d\u5b9a\u3057\u305f\u88c5\u7f6e\u304c\u3001\u7d30\u5de5\u3057\u305f\u8981\u6c42\u3067\u518d\u8d77\u52d5\u3055\u305b\u3089\u308c\u308b\u3002Cisco\u306f10\u6708\u306b\u60aa\u7528\u3092\u628a\u63e1\u3002\n\u5bfe\u51e6\uff1a\u7248\u3092\u78ba\u8a8d\u3057\u30019.20\u306a\u30899.20.4.50\u306a\u3069\u306e\u4fee\u6b63\u7248\u3078\u3002\n\nforsmile.jp/articles/cis...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "url": "https://bsky.app/profile/forsmile.jp/post/3mzmlctltac24"}], "metrics": {"as_of": "2026-11-11T17:36:34.979Z", "anchors": {"origin": {"timestamp": "2026-10-28T19:15:00Z", "date_only": false, "value": "2026-10-28T19:15:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T19:15:00Z", "date_only": false, "value": "2026-10-28T19:15:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-10-29T12:33:52Z", "date_only": false, "value": "2026-10-29T12:33:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityIL/88312", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "548baa4c-ebb3-44e5-a38b-f451136b31f4", "content": "\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e4\u05d9\u05d9\u05e8\u05d5\u05d5\u05dc \u05e9\u05dc Cisco \u05db\u05d3\u05d9 \u05dc\u05d1\u05e6\u05e2 \u05d0\u05ea\u05d7\u05d5\u05dc \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05de\u05db\u05e9\u05d9\u05e8.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-76418, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05e9\u05dc\u05d5\u05d7 \u05d1\u05e7\u05e9\u05d4 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d5\u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05de\u05db\u05e9\u05d9\u05e8 \u05dc\u05d0\u05ea\u05d7\u05dc \u05d0\u05ea \u05e2\u05e6\u05de\u05d5.\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e4\u05d5\u05d2\u05e2\u05ea \u05d1\u05de\u05db\u05e9\u05d9\u05e8\u05d9 ASA \u05d5-FTD. \n\n\u05e1\u05d9\u05e1\u05e7\u05d5 \u05e4\u05e8\u05e1\u05de\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05e2\u05dd \u05e4\u05d0\u05e6', \u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75\n\nhttps://t.me/CyberSecurityIL/9803", "url": "https://t.me/CyberSecurityIL/88312", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-10-28T19:44:49Z", "date_only": false, "value": "2026-10-28T19:44:49+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-76418", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 1789.0, "hours": 0.49694444444444447, "days": 0.02070601851851852, "min_seconds": 1789.0, "max_seconds": 1789.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T19:15:00Z", "date_only": false, "value": "2026-10-28T19:15:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-28T19:44:49Z", "date_only": false, "value": "2026-10-28T19:44:49+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-76418", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 1789.0, "hours": 0.49694444444444447, "days": 0.02070601851851852, "min_seconds": 1789.0, "max_seconds": 1789.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T19:15:00Z", "date_only": false, "value": "2026-10-28T19:15:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-28T19:44:49Z", "date_only": false, "value": "2026-10-28T19:44:49+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-76418", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 62332.0, "hours": 17.314444444444444, "days": 0.7214351851851852, "min_seconds": 62332.0, "max_seconds": 62332.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T19:15:00Z", "date_only": false, "value": "2026-10-28T19:15:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-29T12:33:52Z", "date_only": false, "value": "2026-10-29T12:33:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityIL/88312", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "548baa4c-ebb3-44e5-a38b-f451136b31f4", "content": "\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e4\u05d9\u05d9\u05e8\u05d5\u05d5\u05dc \u05e9\u05dc Cisco \u05db\u05d3\u05d9 \u05dc\u05d1\u05e6\u05e2 \u05d0\u05ea\u05d7\u05d5\u05dc \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05de\u05db\u05e9\u05d9\u05e8.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-76418, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05e9\u05dc\u05d5\u05d7 \u05d1\u05e7\u05e9\u05d4 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d5\u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05de\u05db\u05e9\u05d9\u05e8 \u05dc\u05d0\u05ea\u05d7\u05dc \u05d0\u05ea \u05e2\u05e6\u05de\u05d5.\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e4\u05d5\u05d2\u05e2\u05ea \u05d1\u05de\u05db\u05e9\u05d9\u05e8\u05d9 ASA \u05d5-FTD. \n\n\u05e1\u05d9\u05e1\u05e7\u05d5 \u05e4\u05e8\u05e1\u05de\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05e2\u05dd \u05e4\u05d0\u05e6', \u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75\n\nhttps://t.me/CyberSecurityIL/9803", "url": "https://t.me/CyberSecurityIL/88312", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1203694.97992, "hours": 334.35971664444446, "days": 13.931654860185185, "min_seconds": 1203694.97992, "max_seconds": 1203694.97992, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T19:15:00Z", "date_only": false, "value": "2026-10-28T19:15:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "record": "CISCO-SA-ASAFTD-TUNNEL-DOS-S6MGKB75", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-11T17:36:34.979Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 1201905.97992, "hours": 333.8627722, "days": 13.910948841666668, "min_seconds": 1201905.97992, "max_seconds": 1201905.97992, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T19:44:49Z", "date_only": false, "value": "2026-10-28T19:44:49+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-76418", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "46a2a883-149c-4b66-b54f-6a0e6a08d88e", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-11T17:36:34.979Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 1141362.97992, "hours": 317.0452722, "days": 13.210219675000001, "min_seconds": 1141362.97992, "max_seconds": 1141362.97992, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-29T12:33:52Z", "date_only": false, "value": "2026-10-29T12:33:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityIL/88312", "record": "CVE-2026-76418", "field": "creation_timestamp", "uuid": "548baa4c-ebb3-44e5-a38b-f451136b31f4", "content": "\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e4\u05d9\u05d9\u05e8\u05d5\u05d5\u05dc \u05e9\u05dc Cisco \u05db\u05d3\u05d9 \u05dc\u05d1\u05e6\u05e2 \u05d0\u05ea\u05d7\u05d5\u05dc \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05de\u05db\u05e9\u05d9\u05e8.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-76418, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05e9\u05dc\u05d5\u05d7 \u05d1\u05e7\u05e9\u05d4 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d5\u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05de\u05db\u05e9\u05d9\u05e8 \u05dc\u05d0\u05ea\u05d7\u05dc \u05d0\u05ea \u05e2\u05e6\u05de\u05d5.\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e4\u05d5\u05d2\u05e2\u05ea \u05d1\u05de\u05db\u05e9\u05d9\u05e8\u05d9 ASA \u05d5-FTD. \n\n\u05e1\u05d9\u05e1\u05e7\u05d5 \u05e4\u05e8\u05e1\u05de\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05e2\u05dd \u05e4\u05d0\u05e6', \u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75\n\nhttps://t.me/CyberSecurityIL/9803", "url": "https://t.me/CyberSecurityIL/88312", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T17:36:34.979Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}