⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

Summary

This weekly recap covers several security items, led by Cisco's warning about an actively exploited maximum-severity authentication bypass in Identity Services Engine (ISE), tracked as CVE-2026-76460 with a CVSS score of 10.0. Cisco says an unauthenticated remote attacker can send a crafted request to an affected API endpoint and gain unauthorized access by bypassing the web-based management interface. The recap also reports Plugin4Shell, a zero-click remote code execution flaw that bypasses SHA-pinning verification in Claude Code, OpenAI Codex, GitHub Copilot, and Google Gemini CLI.

Topics

• AI agents

Related items

• InfoJim Cramer has three lingering questions about Anthropic ahead of its historic IPOSame vendor · CNBC Technology
• Infollm-gemini 0.37Same vendor · Simon Willison's Weblog
• InfoGoogle’s new Gemini model is better at understanding complicated questionsSame vendor · The Verge (AI)
• MediumGHSA-68g8-gh8f-7rhg: pgEdge RAG Server discloses part of the configured provider credential through API error messagesSame vendor · GitHub Advisory Database
• InfoHow Amplitude ships product improvements in 1–2 days with OpenAISame vendor · OpenAI Blog