# zero-day

Published articles for zero-day.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Cisco drops another exploited zero-day, this time a perfect 10

DevFeed: [Cisco drops another exploited zero-day, this time a perfect 10](<https://devfeed.tech/articles/cisco-drops-another-exploited-zero-day-this-time-a-perfect-10-41312.md>)

Original publisher: [Read original article](<https://www.theregister.com/security/2026/09/17/cisco-drops-another-exploited-zero-day-this-time-a-perfect-10/5297180>)

Author: Carly Page

Published: 2026-09-17T12:40:00Z

Content type: news

Language: en

Sources: [www.theregister.com - Articles](<https://devfeed.tech/sources/www-theregister-com-articles.md>)

Topics: [Cisco](<https://devfeed.tech/topics/cisco.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Security](<https://devfeed.tech/topics/security.md>), [patches](<https://devfeed.tech/topics/patches.md>)

Tags: [authentication-bypass](<https://devfeed.tech/tags/authentication-bypass.md>), [cisco](<https://devfeed.tech/tags/cisco.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [security](<https://devfeed.tech/tags/security.md>), [zero-day](<https://devfeed.tech/tags/zero-day.md>)

### AI overview

Cisco's ISE authentication bypass is under active attack, following another Cisco zero-day that prompted administrators to urgently apply patches.

### Source excerpt

ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch

## GPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity

DevFeed: [GPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity](<https://devfeed.tech/articles/gpt-6-astra-is-the-first-model-openai-classifies-as-critical-for-cybersecurity-41296.md>)

Original publisher: [Read original article](<https://www.infoq.com/news/2026/09/gpt-6-astra-critical-cyber/>)

Author: Steef-Jan Wiggers

Published: 2026-09-17T04:59:00Z

Content type: news

Language: en

Sources: [InfoQ](<https://devfeed.tech/sources/infoq.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [gpt-6-astra](<https://devfeed.tech/topics/gpt-6-astra.md>), [OpenAI](<https://devfeed.tech/topics/openai.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [Chain-of-thought](<https://devfeed.tech/topics/chain-of-thought.md>)

Tags: [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-ml-data-engineering](<https://devfeed.tech/tags/ai-ml-data-engineering.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [architecture-design](<https://devfeed.tech/tags/architecture-design.md>), [azure](<https://devfeed.tech/tags/azure.md>), [browser](<https://devfeed.tech/tags/browser.md>), [chain-of-thought](<https://devfeed.tech/tags/chain-of-thought.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [development](<https://devfeed.tech/tags/development.md>), [devops](<https://devfeed.tech/tags/devops.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [generative-ai](<https://devfeed.tech/tags/generative-ai.md>), [governance](<https://devfeed.tech/tags/governance.md>), [gpt-6-astra](<https://devfeed.tech/tags/gpt-6-astra.md>), [gpt-6-astra-critical-cyber](<https://devfeed.tech/tags/gpt-6-astra-critical-cyber.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [machine-learning](<https://devfeed.tech/tags/machine-learning.md>), [ml-data-engineering](<https://devfeed.tech/tags/ml-data-engineering.md>), [news](<https://devfeed.tech/tags/news.md>), [openai](<https://devfeed.tech/tags/openai.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [zero-day](<https://devfeed.tech/tags/zero-day.md>)

### AI overview

OpenAI classified GPT-6 Astra as the first model to reach its Critical cybersecurity threshold. Expert-led evaluations reported previously unknown vulnerabilities in a browser and an operating-system kernel, along with working exploit chains. The system card also reported a substantial decline in chain-of-thought monitorability.

### Source excerpt

OpenAI has classified GPT-6 Astra at the Critical cybersecurity threshold under its Preparedness Framework, a first. In expert-led testing the model found previously unknown vulnerabilities in a browser and an OS kernel and built working exploits. The same system card reports a substantial decline in chain-of-thought monitorability. By Steef-Jan Wiggers

## Rolling with the Punches: Why Cybersecurity is Backgammon, Not Chess

DevFeed: [Rolling with the Punches: Why Cybersecurity is Backgammon, Not Chess](<https://devfeed.tech/articles/rolling-with-the-punches-why-cybersecurity-is-backgammon-not-chess-39493.md>)

Original publisher: [Read original article](<https://www.philvenables.com/post/rolling-with-the-punches-why-cybersecurity-is-backgammon-not-chess>)

Author: phil7672

Published: 2026-08-22T16:49:47Z

Content type: opinion

Language: en

Sources: [Risk and Cyber](<https://devfeed.tech/sources/risk-and-cyber.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [benchmarking](<https://devfeed.tech/topics/benchmarking.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Threat Research](<https://devfeed.tech/topics/threat-research.md>)

Tags: [benchmarking](<https://devfeed.tech/tags/benchmarking.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [leadership](<https://devfeed.tech/tags/leadership.md>), [risk](<https://devfeed.tech/tags/risk.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [zero-day](<https://devfeed.tech/tags/zero-day.md>)

### AI overview

The article argues that cybersecurity is better understood as backgammon than chess because organizations must prepare for many possible outcomes amid complex dependencies, supply chains, changing technology platforms, and unpredictable attackers. It also argues that cybersecurity benchmarking should focus on control effectiveness and outcomes rather than inputs such as budgets.

### Source excerpt

It is tempting to compare cybersecurity to a chess game. Two adversaries facing each other, plotting strategy and tactics. Move and counter move, anticipating actions and grinding out a win. In reality, in our complex world of dependencies, supply chains, constantly shifting technology platforms and unpredictable attackers, this is all way more haphazard. Indeed, a better analogy is backgammon, where you position yourself for many different possible outcomes to maximize your chance of...

## Whether Rising Vulnerabilities Will Cause a Cybersecurity Incident Crisis

DevFeed: [Whether Rising Vulnerabilities Will Cause a Cybersecurity Incident Crisis](<https://devfeed.tech/articles/a-coming-incident-crisis-39484.md>)

Original publisher: [Read original article](<https://www.philvenables.com/post/a-coming-incident-crisis>)

Author: phil7672

Published: 2026-08-08T14:58:15Z

Content type: article

Language: en

Sources: [Risk and Cyber](<https://devfeed.tech/sources/risk-and-cyber.md>)

Topics: [incident](<https://devfeed.tech/topics/incident.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>)

Tags: [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [incident](<https://devfeed.tech/tags/incident.md>), [leadership](<https://devfeed.tech/tags/leadership.md>), [risk](<https://devfeed.tech/tags/risk.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [zero-day](<https://devfeed.tech/tags/zero-day.md>)

### AI overview

The article examines whether increasing software vulnerabilities will lead to more cybersecurity incidents. It argues that security breaches often result from ineffective controls rather than exceptionally capable attackers or sophisticated zero-day exploits, and that benchmarking should focus on control effectiveness instead of inputs such as budgets.

### Source excerpt

We're all talking about the tidal wave of vulnerabilities that is upon us, with repeated waves likely coming. As I've covered here, we can respond to this in various ways including ramping up speed across our entire defensive stack, which is as much about structural defense-in-depth than just faster patching. I've covered that here as well. But, there's a question as to whether the leading indicator of increasing vulnerabilities will in fact result in an increase in the lagging indicator of...