Crafted email attachments can give attackers root access to Cisco gateways
Cisco says attackers are exploiting CVE-2026-76519, a critical Secure Email Gateway flaw that lets an unauthenticated sender write arbitrary files and execute commands as root through a crafted attachment. It affects physical and virtual gateways when AMP File Reputation is enabled and the Content Scanner Tools version is earlier than 25.3.0.5525; no workaround exists.
Why it matters to you
The security appliance inspecting inbound mail can itself become the entry point. Upgrade immediately, identify every affected virtual and physical gateway, preserve mail and system logs outside the appliance, hunt for unfamiliar files and processes and rebuild from trusted media if compromise is suspected.
Exploited PAN-OS management flaw enables root command execution
Palo Alto Networks observed limited exploitation of CVE-2026-0322, an authenticated remote-code-execution vulnerability in PAN-OS management interfaces. An attacker with valid administrative access and network reachability can execute arbitrary code as root on PA-Series, VM-Series and Panorama systems.
Why it matters to you
A firewall management-plane compromise can undermine the controls and evidence used to protect the network. Install the fixed release, restrict management to a hardened jump host, rotate administrator credentials and API keys, and compare appliance activity with independently stored authentication and flow logs.
DeepMind calls recent AI-agent hacks an early warning
Google DeepMind chair Demis Hassabis said recent agent-driven intrusions show that more serious incidents could follow as systems become stronger. He called for security practices comparable to those used in other high-risk fields and an international, risk-proportionate certification body.
Why it matters to you
Do not wait for an industry standard before securing SaaS agents. Enforce destination allowlists, task-scoped credentials, approval gates and transaction limits beneath the model; retain tamper-resistant tool-call evidence and rehearse how to revoke an agent without disabling the core product.
Starlink disruption exposes Europe's satellite-network concentration risk
Ukraine reported interruptions to Starshield service on fast-moving terminals and a separate gap in US-provided missile-warning data. The causes remain unclear, but European governments currently lack ready-made replacements for either low-orbit tactical connectivity or US space-based infrared warning systems.
Why it matters to you
A technically redundant service is not resilient when every path depends on one provider, jurisdiction or control plane. Document satellite and terrestrial dependencies, keep an independently operated fallback, test degraded-bandwidth procedures and avoid embedding provider-specific assumptions into critical applications.
ASML says planned capacity increases will not meet AI-chip demand
ASML says some customers are already seeking advanced lithography-tool orders for 2029 and 2030. The company now expects planned capacity increases of 30% in both 2027 and 2028 to be insufficient, and will raise throughput through equipment upgrades while increasing prices from 2027.
Why it matters to you
AI capacity is constrained several layers before a server reaches a rack. Forecast supply and pricing across fabrication tools, packaging, memory, networking and power—not GPUs alone—and keep workloads portable across hardware generations when delivery schedules or economics change.