Reports
AI-generated structured vendor updates
Microsoft Azure Updates: GenAI Telemetry Protection in Application Insights, DDoS Protection Custom Policy, IPv6 VPN Gateway GA
...
Zscaler报告显示企业100%存在未治理AI暴露面
...
Cisco Proposes Logically Air-Gapped Model with eBPF, Shifting Security to Kernel
Cisco introduces a logically air-gapped governance model using eBPF and Cilium to create a software-defined cryptographic perimeter at the kernel level. Integrating Cisco Secure Workload with Isovalent, it aims to provide data residency and regulatory compliance for containerized, virtualized, and bare-metal environments without sacrificing cloud agility.
NVIDIA CUDA 13.3 Introduces clmad for Hardware-Accelerated Carryless Multiplication on GPUs
NVIDIA CUDA 13.3 adds the clmad hardware instruction for carryless multiply-accumulate on Ampere+ GPUs. GHASH throughput reaches 6.3 TB/s on B200, up to 18.8x faster than bitsliced. Sum-check protocol accelerates 3-13x. The instruction also benefits CRC, Reed-Solomon, and post-quantum cryptography.
Global FortiGate Compromise Exposes Critical Management Plane Vulnerabilities
Pakistan CERT warns of approximately 74,000 Fortinet FortiGate devices compromised across 194 countries. Attackers exploited exposed management interfaces and legacy credential storage. The incident underscores the critical need for securing network edge device management planes.
FortiBleed Exposes 70k+ Devices: Attack Surface Shifts from Zero-Day to Credential Hygiene
In July 2026, the FortiBleed credential theft campaign targeted 73,000+ Fortinet devices using a custom sniffer tool. Attackers exploited default/weak passwords, not zero-days, and are linked to INC and Lynx ransomware groups. Global banks, energy firms, and critical infrastructure operators are impacted, exposing a systemic failure in basic security hygiene.
FortiGate Firewalls Breached: 430K Devices Targeted with VPN Credential Sniffing
Attackers compromised approximately 430,000 FortiGate firewalls worldwide, deploying custom sniffers to intercept VPN credentials. The operation is linked to INC Ransom and Lynx ransomware groups, highlighting a new attack surface on edge devices that bypasses traditional EDR/SIEM.
Palo Alto Networks PAN-OS Vulnerabilities: Buffer Overflow and Active Exploitation
Palo Alto Networks disclosed 13 PAN-OS vulnerabilities, with the most critical being CVE-2026-0288 (CVSS 9.2), a buffer overflow in User-ID TSA allowing unauthenticated RCE. CVE-2026-0257, an authentication bypass in GlobalProtect, is actively exploited in the wild.
Active Exploitation of CVE-2026-0257: GlobalProtect VPN Authentication Bypass Threatens Enterprise Networks
Palo Alto Networks confirms active exploitation of CVE-2026-0257 in GlobalProtect VPN. Attackers exploit shared certificates between HTTPS and authentication override to forge cookies, impersonating admins. CISA added to KEV. Urgent upgrade or dedicated cookie encryption certificate recommended.
Making private MCP servers reachable without making them public | OpenAI Developers
...
Mandiant Reveals Cisco SD-WAN Manager Zero-Day: Control Plane Becomes Prime Target
Mandiant identified a zero-day (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager exploited via malicious CSV upload to escalate to root. The intrusion involved rogue peering, credential manipulation, and anti-forensic cleanup. This highlights SD-WAN centralized control planes as a new attack surface for advanced threats.
Zscaler's ZAgent Framework and Zero Trust Browser: Control Shifts from Network to AI Orchestration
At Zenith Live 2026, Zscaler launched the ZAgent Framework for natural-language agent orchestration, a Zero Trust browser extension and enterprise browser to replace VDI/VPN, and expanded workload security to GCP. This shifts SASE control from network appliances to AI-managed endpoints and browser-based access.
NVIDIA RTX Remix 1.5: RTX IO Shrinks Game Sizes, AI Agents Reshape Modding
NVIDIA releases RTX Remix 1.5, featuring RTX IO compression that slashes Half-Life 2 RTX from 80GB to 50GB and reduces CPU overhead. The update also introduces AI agent integration via 'RTX Remix Skills,' allowing AI coding agents to automate complex modding tasks, lowering the barrier for non-programmers.
Cloudflare One Stack: AI Agent Skills to Automate SASE Migration, Targeting Zscaler Lock-in
Cloudflare launches the Cloudflare One Stack, a set of skill files for AI agents to automate Zero Trust deployment and migration, with built-in logic for migrating from Zscaler and Palo Alto Networks. It integrates with the MCP server for live API access, aiming to slash switching costs and accelerate defection from rival SASE platforms.
Palo Alto GlobalProtect VPN 0-Day Under Active Exploit: Gateway RCE Exposes Remote Access Risks
A critical unauthenticated remote code execution vulnerability in Palo Alto Networks GlobalProtect VPN is under active exploitation. This flaw directly compromises the VPN gateway, a key enterprise remote access component, exposing networks to potential takeover. Urgent patching and log review are mandated for all affected organizations.
Cloudflare Extends Security Stack to Private Origins via DNS Routing
Cloudflare launches Application Services for Private Origins, enabling Enterprise customers to route public traffic to private IPs via DNS records. WAF, bot management, rate limiting, caching, and Workers now protect private applications without public exposure or connector software. Built on existing private network connectivity (IPsec/GRE/CNI/Mesh), it extends to Spectrum and Workers VPC, unifying the control plane for private traffic.
Cisco Unveils AI-Native Branch Architecture with AgenticOps and PQC
At Cisco Live 2026, Cisco refreshes the Secure Router 8000 series and introduces a Unified Branch architecture with AgenticOps, post-quantum cryptography (PQC), and hybrid mesh firewalling. The control plane moves to Cisco Cloud Control, aiming for an AI-native, cloud-managed WAN platform.
Cisco Embeds OT Security Control into Switch ASIC: From Visibility to Enforced Segmentation
At Cisco Live 2026, Cisco launches Cyber Vision updates that embed auto-policy recommendation, simulation, and line-rate enforcement directly into IE3500/IE9300 Industrial Ethernet switches using its own ASICs. Secure remote access is also integrated. This shifts OT security control from appliances to the network fabric, creating a closed loop from visibility to prevention, but locks users into Cisco's full stack.
Cisco Shifts AI Network Control from K8s Black Box to Unified Fabric via Isovalent and VXLAN ESG
Cisco integrates Isovalent's eBPF into Nexus One for pod-to-fabric visibility and introduces VXLAN ESG-based AI job segmentation, embedding security and multi-tenancy into the network fabric. This targets the Kubernetes 'black box' bottleneck in AI inference, unifying control and troubleshooting.
Cisco & Microsoft Join Forces: Browser Becomes Zero Trust Control Plane with SSE-Edge Integration
Cisco Secure Access integrates deeply with Microsoft Edge for Business, embedding zero-trust access, DLP, and AI threat protection directly into the browser. The browser replaces VPN/agent as the primary entry point for private apps, with unified policy enforcement that also governs AI agents like Copilot, signaling a control plane shift from network to browser layer.