Cisco ISE Zero-Day and GhostCode OAuth Phishing Demand Immediate Action

Podcast: Threat Analysis : Cyber News for Small Business · The Small Business Cyber Security Guy

Opublikowano: 2026-09-17

Cisco ISE Zero-Day and GhostCode OAuth Phishing Demand Immediate Action Two critical threats require immediate attention from UK businesses today. Cisco has disclosed an authentication bypass vulnerability in its Identity Services Engine with a maximum CVSS score of 10.0, and exploitation is already confirmed as active. ISE functions as a network gatekeeper for VPN, device compliance, and access control, making this vulnerability a direct path to your network perimeter. Separately, the GhostCode phishing technique weaponises Microsoft’s legitimate OAuth device code flow to bypass multi-factor authentication entirely. The attack arrives via business contact forms, presents victims with authentic Mi...