One-Click RCE in Azure Windows Admin Center: what happened and what you need to do

One-Click RCE in Azure Windows Admin Center: what happened and what you need to do

Windows Admin Center (WAC) is a convenient, browser-based management hub for administrators to manage servers, clients, and clusters from a centralized interface. A recent Cymulate Research Labs disclosure describes a critical chain of flaws that let an attacker achieve unauthenticated, one-click remote code execution (RCE) against both Azure-integrated and on-premises WAC deployments. The exploit requires little user interaction—a maliciously crafted

Cisco Under Fire: Zero-Day in Secure Firewall Management Center Powers Interlock Ransomware

Cisco Under Fire: Zero-Day in Secure Firewall Management Center Powers Interlock Ransomware

A critical zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) — tracked as CVE-2026-20131 — has been exploited in the wild to deploy Interlock ransomware. The timeline and technical details reported by independent researchers make this a clear, urgent warning for organizations running Cisco FMC: an unauthenticated remote exploit can lead to arbitrary Java code execution with root privileges,