Live threats
HighCISA Orders Federal Patch for Cisco BroadWorks Flaw Exploited by AI‑Driven DeepSeek Agent BreachMaersk Confirms Legacy System Breach; Hackers Claim 100 GB Data Theft and $5 M Ransom Demand Rule changeIberoamerican Data Protection Network approves pioneering AI and personal data standards DeadlineFarm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026 CriticalMultiple Critical SAP Vulnerabilities Could Enable Arbitrary Code Execution Across NetWeaver, Web Dispatcher, and Cloud SDK BreachSberSpasibo Loyalty Program Breach Exposes 3.3 M Email Addresses and Card Hashes Rule changeFederal Register limits programmatic access to its sites and requires CAPTCHA verification CriticalCritical Xen Orchestra Auth Bypass Enables Full VM Host Takeover
Updated 13:19 UTC All intelligence →
Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
EN
JoinJoin
BREACH WATCH BRIEF High 🏛️ Vulnerability

CISA Orders Federal Patch for Cisco BroadWorks Flaw Exploited by AI‑Driven DeepSeek Agent

CISA has ordered all civilian agencies to apply a Cisco BroadWorks patch after researchers showed a Chinese‑state‑linked group using a jail‑broken DeepSeek model to automate file theft from a European telecom. The vulnerability highlights the need for rapid patch management and evidence‑driven control assurance across frameworks.

ADTP Breach Watch · November 12, 2026 · DataBreachToday
SeverityHigh
Type🏛️ Vulnerability
ConfidenceHigh
ReportedNov 12, 2026
Telecommunications Telecommunications carriers Healthcare data handlers using Cisco BroadWorks Vulnerability Exploit Other

What happened

CISA added a Cisco BroadWorks vulnerability to its Known Exploited Vulnerabilities list and gave federal agencies until Nov 24 to patch. Malbear Labs traced the exploit to an AI‑driven tool that sent malicious XML, stole private keys and accessed a health‑care database protected by default credentials.

Why it matters for trust and compliance

  • Timely remediation of known flaws satisfies the control objective of vulnerability management, a single control that maps to many frameworks such as NIST CSF, ISO 27001, and SOC 2.
  • Provides auditable evidence of patch‑deployment for multiple compliance regimes.
  • Enables continuous mapping of vulnerability remediation to the Verisq Common Framework.

Who is affected

Telecommunications carriers Healthcare data handlers using Cisco BroadWorks

Recommended actions

  1. Apply Cisco’s BroadWorks patch to all affected instances.
  2. Review and harden XML provisioning interfaces to block external references.
  3. Incorporate AI‑driven exploit detection into your vulnerability‑management process.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the mapFollow Regulatory Watch
  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analyzed for practitioners, in one email.