CISCO PATCHES MAX-SEVERITY ISE ZERO-DAY UNDER ACTIVE ATTACK

Cisco disclosed the vulnerability in its Identity Services Engine (ISE) platform, which manages network access and authentication across enterprise environments. The company confirmed that threat actors are exploiting the flaw in live attacks. The vulnerability allows unauthenticated attackers to execute arbitrary code and gain complete system control. ISE deployments worldwide face immediate risk, making patching a priority for organizations relying on the platform for network security. Cisco urged customers to apply patches without delay. The company provided updates across multiple ISE versions. Administrators should verify their current version and deploy the appropriate fix from Cisco's security advisory. Identity Services Engine is a widely-used platform in enterprise networks, handling critical authentication and authorization functions. A compromise could grant attackers deep access to protected infrastructure and sensitive systems. The zero-day's active exploitation in the wild underscores the urgent threat level. Security researchers tracking the campaign have not disclosed specific attack methods, but organizations should assume threat actors possess working exploits. Cisco recommended customers apply fixes immediately and monitor ISE systems for suspicious activity. Network teams should review access logs for unauthorized authentication attempts and unusual administrative access. Organizations unable to patch immediately should consider isolating vulnerable instances or implementing network-based protections. The disclosure follows a pattern of critical vulnerabilities in authentication and network access platforms becoming prime targets for attackers seeking footholds in enterprise networks. ISE's role in controlling network access makes it particularly valuable to threat actors aiming for persistent access.