⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

This week featured multiple security flaws across trusted software: Cisco's Identity Services Engine had a critical authentication bypass (CVE-2026-76460, CVSS score 10.0) allowing attackers to access devices remotely without a password, and AI coding agents like Claude Code and GitHub Copilot were vulnerable to Plugin4Shell, a zero-click remote code execution (running malicious commands without user interaction) attack that bypassed verification checks by swapping legitimate plugins for malicious ones. Additionally, a researcher used Claude to chain vulnerabilities in OpenAI's systems to gain unauthorized access, and new banking malware called KREMLIN was discovered hijacking web browsers for credential theft.