Cybersecurity Today

Cisco Patches Async OS Bug

Jan 19, 2026
Critical security flaws have been patched by Cisco, addressing a severe zero-day vulnerability exploited by a Chinese state-linked group. Fortinet also resolved a critical issue in its software actively targeted by hackers. The Dutch National Police face challenges recovering from a significant breach, highlighting the urgency for modern infrastructure. A spear-phishing campaign is on the rise, using Venezuela-themed tactics to deceive U.S. organizations. Finally, a recent study warns about the dangers of training AI to generate insecure code, leading to broader cybersecurity risks.
Ask episode
AI Snips
Chapters
Books
Transcript
Episode notes
ADVICE

Patch And Hunt After Cisco Async OS Flaw

  • Patch Cisco Async OS appliances immediately if vulnerable to close remote root access risk.
  • Check systems for persistent backdoors, reverse SSH tunnels, and log wiping as David Shipley warns.
ADVICE

Urgent Patch Or Block For Fortinet 40SEAM

  • Apply Fortinet 40SEAM patches for versions 6.7–7.5 immediately to prevent unauthenticated root takeover.
  • If you cannot patch, restrict access to the pH monitor port as a temporary mitigation.
INSIGHT

Old Infrastructure Amplifies Nation-State Risk

  • Aging government IT makes patching, isolation, and rapid response much harder under nation-state pressure.
  • The Dutch case shows disruption can be severe even when data theft isn't confirmed.
Get the Snipd Podcast app to discover more snips from this episode
Get the app