Free Posture Self-Check

Back to Cyber Hose

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

Sandworm chains Cisco flaws to deploy Cyclops Blink botnet, while Casdoor and IBM MQ disclose critical vulnerabilities.

2026-09-14 23:16 UTC

🚨 ACTIVE EXPLOITATION

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink
The notorious Russian threat group is spreading an upgraded version of the botnet malware, which the FBI disrupted in 2022.
📎 Coverage: darkreading.com · 👁 via Dark Reading

🔓 CVEs & KEV

CVE-2026-90942 — casdoor — CVSS 9.3 — Casdoor Private Key Exposure Leads to JWT Forgery (CVE-2026-90942)
CVE-2026-13293 — IBM MQ — CVSS 8.8 — IBM MQ Remote Code Execution via Deserialization (CVE-2026-13293)

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check