Cisco, Bitget and OpenAI Face Zero-Days, Breaches and Covert Attacks

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily for CISOs, security leaders, and decision-makers. Today’s briefing:

1. 01

   Cisco warns that attackers are actively exploiting CVE-2026-76504, a critical authentication bypass in Catalyst SD-WAN Manager that can expose admin APIs and enable full system takeover without credentials. With no workaround available, organizations should patch immediately, restrict internet access, and review logs.

2. 02

   Bitget says a $387.5 million cryptocurrency theft resulted from a zero-day in third-party security products, enabling credential theft, control bypasses, and unauthorized withdrawals across 11 blockchains. The incident highlights how supplier vulnerabilities can rapidly become exchange-wide breaches and major financial losses.

3. 03

   A cyberattack disrupted South Africa’s air traffic control systems, forcing officials to use backup procedures while assessing the impact. The incident underscores the operational and safety risks facing critical aviation infrastructure, with potential consequences for airlines, regulators, and passengers.

4. 04

   OpenAI says it disrupted an effort to extract proprietary reasoning capabilities from its models through a novel prompt-based technique, involving activity linked to China-based Moonshot AI. The case highlights growing risks to AI intellectual property and the potential for model weaknesses to accelerate capability theft.

5. 05

   Researchers have identified Terminalfix and Lorem Ipsum Loader as tools supporting covert tunneling, helping attackers hide communications and maintain network access. Such channels can evade monitoring and enable persistence, data theft, and follow-on attacks.