As cited
Copy frozen at (site build).
government policy
US sanctions Xinbi Guarantee over cyber scams and money laundering
Cisco confirmed that CVE-2026-20079, a maximum-severity authentication bypass vulnerability in Secure Firewall Management Center, is being actively exploited in attacks. The vulnerability allows unauthenticated remote attackers to bypass authentication and execute commands as root on vulnerable systems. Cisco first disclosed the flaw in March with no evidence of active exploitation, but updated its advisory in August after the company became aware of ongoing attacks.
Why it matters: Organizations running Cisco Secure Firewall Management Center face immediate risk of complete system compromise; patch or mitigate CVE-2026-20079 urgently as exploitation is confirmed in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
government policy
US sanctions Xinbi Guarantee over cyber scams and money laundering
The US Treasury Department sanctioned Xinbi Guarantee, a Chinese-language online marketplace used by cybercriminals for scams, fraud, and money laundering targeting Americans. The Justice Department's Scam Center Strike Force seized associated infrastructure and digital asset wallets. Treasury also sanctioned two supporting entities based in Cambodia and Singapore.
Why it matters: Organizations and individuals handling financial transactions, particularly those serving customers vulnerable to cybercrime, should understand that the US is actively disrupting scam infrastructure and the ecosystem supporting it; this may affect how criminal networks adapt their operations.
- Source published
- First seen by Cybersecurity Tracker