Cisco warns of max severity ISE zero-day exploited in attacks
Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in…
Why am I seeing this Ranked on corroboration — 2 independent outlets
2 independent outlets carried this — BleepingComputer and Feedburner. Agreement across newsrooms that do not share an owner is the strongest thing we can measure, so it carries the most weight.
StandardStandard, because two or more independent orgs carry it, the subject was identified from the text, and it scores 0.51 against a bar of 0.50.
| Factor | Weight | Score | Contribution | Where it came from |
|---|---|---|---|---|
| Corroborationleads | 0.35 | 0.61 | +0.215 42% | 2 distinct tier-1/2 orgs, counted once each: BleepingComputer and Feedburner. Saturates at 5. |
| Source trust | 0.25 | 0.85 | +0.212 41% | BleepingComputer is the highest-trust source on this story. Trust is taken from the best source, not averaged. |
| Pickup rate | 0.20 | 0.05 | +0.010 2% | The sources carry no usable publish times, so the rate could not be measured from them directly. |
| Freshness | 0.20 | 0.38 | +0.077 15% | Halves every 10 hours from the newest item on the story. This is the only factor that rewards a story for nothing more than being recent. |
Corroboration counts distinct organisations, once each, and only from tiers 1 and 2. Freshness halves every 10 hours, so this ranking is a snapshot and will differ at the next build.
What happened
Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild. Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exploitation. The vulnerability, tracked as CVE-2026-76460 (CVSS score: 10.0), could allow an unauthenticated, remote attacker to bypass authentication. "This vulnerability is due to insufficient authentication control on an API endpoint," Cisco said.
How this story arrived
Ordered by when each source was first observed, which is what the velocity figure is computed from. Publishers backdate; observed order does not.
- 01 Bleepingcomputer first seen Cisco warns of max severity ISE zero-day exploited in attacks
- 02 Feedburner +6.0h Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
Overclock clusters coverage from independent sources and grades it automatically. The figures above are computed, not editorial. This page summarises and links to reporting by the outlets named — follow the links for the original work.