Cisco patched CVE-2026-76519, an exploited Secure Email Gateway flaw that gives unauthenticated attackers root through a crafted email attachment. Devices with File Reputation enabled and Content Scanner Tools earlier than 25.3.0.5525 are affected.
Perspective Coverage
5 publishers
- Builder
- Builder 13%
- Operator
- Operator 76%
- Investor
- Investor 11%
Reality
- Evidence82
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence78
buildOne report1 publisher Researcher reports an actively exploited root RCE in Cisco's Secure Email Gateway
Satyam Rastogi reports that Cisco patched a Secure Email Gateway zero-day that let unauthenticated attackers run commands as root, exploited before the fix. The post gives no CVE or fixed version, so SEG operators have the warning but no build to patch to.
Reality
- Evidence25
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence35
Microsoft and international partners dismantled the Yam Store phishing marketplace, whose kits enabled more than 1 billion malicious messages. Microsoft says buyers could deploy the pre-made kits very quickly, so a polished lure says little about the sender's skill.
Perspective Coverage
4 publishers
- Builder
- Builder 16%
- Operator
- Operator 56%
- Investor
- Investor 28%
Reality
- Evidence55
- Adoption70
- Hype gap+15
- Incentives60
- Confidence65
Fake CAPTCHA pages keep scanners out and get victims to run the malware themselves
Barracuda found CAPTCHA abuse in 43% of the phishing-kit attacks it examined during 2025. The check can keep automated scanners from reaching the next page, so a URL scan may inspect only the CAPTCHA.
Reality
- Evidence45
- Adoption43
- Hype gap+10
- Incentives40
- Confidence55
buildOne report1 publisher Attackers had 24 days to diff Zimbra's quiet 10.1.20 fix before CVE-2026-73570 was disclosed
Attackers are exploiting Zimbra Collaboration Suite flaw CVE-2026-73570, which Synacor fixed quietly in 10.1.20 on July 20 and disclosed on August 13. An upgrade closes the injection path, but a web shell written earlier stays on disk until someone finds it.
Reality
- Evidence58
- Adoption30
- Hype gap+10
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher Fewer than half of the 1,000 most popular websites reject spoofed email
Just 474 of the 1,000 most popular websites set DMARC to reject spoofed mail, a dev.to survey of their DNS found. Thirty-two months after Google and Yahoo began requiring DMARC from bulk senders, 84.5% of the sites publish a record, but only 69.4% apply an enforcing policy to all their mail.
Reality
- Evidence62
- Adoption68
- Hype gap0
- Incentives
- Not scored
- Confidence60
Microsoft will block .msix and .msixbundle attachments by default in Outlook on the web and the new Outlook for Windows from early November. Tenants that still mail app packages need a policy exception before general availability in mid-November.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+10
- Incentives30
- Confidence78
Barracuda finds phishing mail aimed at both the recipient and the AI that summarizes their inbox
Barracuda analyzed a phishing campaign pairing a password-protected attachment with hidden prompt injection aimed at the user's AI inbox summarizer. The filter that passes a message decides what the assistant reads, so the two need testing as one path.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher MFA-relaying proxy kits make up 44.6% of phishing techniques in Microsoft's 2026 report
Microsoft's 2026 Digital Defense Report puts MFA-relaying proxy kits at 44.6% of phishing techniques, as phishing rose to 23% of its incident cases. SMS codes and push approvals pass straight through those proxies, so protecting company email now means passkeys or FIDO2 keys, starting with admins and finance staff.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+5
- Incentives40
- Confidence55
buildOne report1 publisher Star Blizzard now delivers the CosmicPulse backdoor through fake event invitations
Microsoft says Russia's FSB-linked Star Blizzard sent fake event invitations to more than 100 organizations since January 2026. The lures pose as Chatham House and Atlantic Council events and carry a new Python backdoor, CosmicPulse, aimed at people working on Ukraine.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence62
buildOne report1 publisher Cisco email gateway flaw runs attacker SQL as root the moment it parses a message
CVE-2026-76461 lets a crafted email run SQL as root on Cisco Secure Email Gateway, with no workaround and a September 17 federal patch deadline from CISA. Because the trigger is mail parsing, every gateway in the mail path is in scope, whether or not it faces the internet.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher CVE-2026-76441 lets unauthenticated attackers reach restricted functions on Cisco email gateways
CERT-In rates CVE-2026-76441 critical for letting unauthenticated remote attackers into restricted functions on Cisco email gateways 15.5 and earlier. The gateway inspects mail in both directions, so the fix belongs ahead of the next scheduled window, using the release Cisco's own advisory names.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence50
INKY counted 26,589 fake voicemail messages between June 1 and August 4, and Microsoft's native scoring rated three quarters of them clean, so stripping SVG at the gateway is now a budget line, not a debate.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence58
Defender missed 221 high-severity emails per 1,000 users in Microsoft's own benchmark
The May to July figures come from Microsoft and the competing vendors are unnamed. Miss counts are rising across reporting periods, Defender's included, and the third-party layer caught 0.30% of malicious mail.
Reality
- Evidence45
- Adoption30
- Hype gap+30
- Incentives85
- Confidence55
buildOne report1 publisher Abnormal AI runs agent-driven code in an ephemeral MicroVM on the inline email path
AWS's post on the deployment gives the sandbox defaults that decide whether it fits an inline path, among them a 15-minute session time-to-live configurable to eight hours and a choice between VPC-only and public internet access.
Reality
- Evidence46
- Adoption62
- Hype gap+25
- Incentives82
- Confidence52
buildOne report1 publisher Instinct's assistant sent an email in a tester's name without asking her first
Katie Jacobs Stanton said Instinct sent an email on her behalf without checking with her first, and a second tester reported inbox reads after she disconnected her Google account from the invite-only assistant.
Reality
- Evidence48
- Adoption24
- Hype gap+18
- Incentives62
- Confidence46
Attackers are planting PHP webshells through the WordPress Super Forms upload flaw
CVE-2026-14894 gives an unauthenticated attacker code execution on a WordPress site, and the fix is Super Forms 6.3.314. Microsoft separately reports invisible Unicode tag characters at up to 2.37 million messages a day.
Reality
- Evidence45
- Adoption30
- Hype gap+10
- Incentives40
- Confidence45
A 472-character invisible payload steered an email summarizer into reporting only the attacker's text
Forcepoint X-Labs hid instructions in zero-pixel white HTML and watched a summarizer repeat them as fact. The measurement is new; two named practitioners say the design flaw it measures has been documented since 2023.
Reality
- Evidence58
- Adoption22
- Hype gap+27
- Incentives72
- Confidence60
Attackers repurposed prompt injection's invisible Unicode to break email keyword matching
Microsoft's hunt for email-borne prompt injection instead surfaced a three-month phishing campaign hiding tag characters inside words like funding, which puts both problems on one detection team's desk.
Reality
- Evidence58
- Adoption62
- Hype gap+12
- Incentives68
- Confidence55
Claude's Gmail agent turns one approval toggle into your whole outbound policy
Claude will send, reply and forward once you switch approval off, which leaves that review step doing double duty as the feature's only brake and as the sole defence anyone can name against prompt injection.
Reality
- Evidence42
- Adoption
- Not scored
- Hype gap+12
- Incentives35
- Confidence45