Cybersecurity threats target Cisco, WordPress, and crypto ecosystems

September 2026 has seen a surge in diverse cybersecurity threats targeting critical infrastructure, software supply chains, and cryptocurrency ecosystems.

A critical vulnerability in Cisco’s Identity Services Engine (CVE-2026-76460) has been identified with a CVSS score of 10.0, allowing unauthenticated remote attackers to bypass authentication via an API endpoint. Additionally, ClickFix attacks are increasing, using embedded redirects to force users to execute malicious commands.

In a separate campaign, security researchers at GreyNoise uncovered a WordPress exploit chain used to infiltrate government networks. This attack resulted in the theft of over 18,000 sensitive records from a Western government agency and the compromise of nearly one thousand network switches globally.

The cryptocurrency sector also faced significant losses, with attackers exploiting wallet access to drain approximately $2 million from Fetch.ai and NuNet. The breach involved the theft of 8.7 million FET tokens and the unauthorized minting of 408.5 million NTX tokens.

Independent software vendors (ISVs) are facing heightened pressure due to compromised developer tooling, Magento zero-day exploits, and a wave of critical RMM patches. These incidents highlight a growing trend where attackers target third-party components and build pipelines rather than the primary software itself.