AI advancements transitioned from experimental risks into confirmed attackers, with Cisco's firewall exposing a zero-day exploit in the wild and VMware's critical authentication bypass leaving enterprise virtualization infrastructure vulnerable. Cisco’s PSIRT confirmed active exploitation as of July 2026 and urged immediate hotfix deployment since no workaround exists; administrators should check for exploitation via log entries referencing /var/tmp/license.tmp, rotate all credentials, keys, and certificates on affected appliances, and deploy the latest hotfixes for FMC versions 7.0 through 10.0. A Two-Minute Microsoft Teams A campaign labeled STAC4749 targeted dozens of North American organizations between February and June 2026, using Microsoft Teams voice phishing calls lasting two to two-and-a-half minutes to impersonate IT helpdesk staff and trick employees into granting remote access via Microsoft Quick Assist.
The system is governed by four key pillars: agents function within Burp's existing toolset and project framework, leveraging tailored pentesting expertise, operating under defined autonomy levels, and are constrained by Burp's tooling layer rather than the AI model itself, ensuring every action is logged. Additionally, researchers found active exploitation of HPE iLO interfaces showing a 0.3 BTC ransom note. Email account takeovers remain a common entry point for attackers to identify business partners, harvest sensitive documents, and launch further social engineering; hidden mailbox forwarding rules are a frequent persistence technique attackers use to maintain silent access.
