Zero-Day Vulnerabilities and Data Breaches: A Week of Cybersecurity Threats

Cisco patched an exploited email gateway zero-day vulnerability on Monday, and Revolut confirmed it was hit by a data breach in which sensitive customer records were stolen.

The zero-day SQL injection vulnerability (CVE-2026-76461) has been actively exploited since September 2025, and Cisco's Product Security Incident Response Team shared indicators of compromise to help organizations check if they've been affected.

Separately, Revolut said that someone impersonating a government agency had obtained sensitive customer records from the bank using an email address on the agency's domain. The breach was confirmed by the bank on Saturday, September 12.