Severity: Informational

NIK C2: The new AI-enabled command-and-control framework

Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”

Excerpt from the primary source: Cisco Talos Intelligence

Who is affected

Enterprises · Security professionals

Affected technology: Cisco networking & security

What you should do

No specific action is required at this time.

Sources

We link to original and authoritative sources. Headlines and excerpts belong to their publishers.

Security research

NIK C2: The new AI-enabled command-and-control framework Cisco Talos Intelligence · blog.talosintelligence.com · Oct 29, 2026 · Primary source
Severity: CriticalAction: Act nowExploitation: Exploited

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote Access SSL VPN service. Attackers can exploit it remotely, without authenticating, to force the device […]…

Why it matters

Source reporting says attackers are already exploiting this, so exposed Cisco networking & security systems are at immediate risk.

Act now

Treat this as an emergency.

Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access to affected systems to deploy KeyDrift.

Why it matters

CISA lists this as exploited in the wild. Unpatched Cisco networking & security and Catalyst SD-WAN Controller and Manager systems are exposed to active attacks now.

Act now

Treat this as an emergency.

Severity: HighAction: Patch

Cisco Patches 34 Vulnerabilities Across Multiple Products

Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.

Patch

Apply the vendor's security update for Cisco networking & security.