Today's Focus: Cybersecurity, Data Security & Cloud Security
Today's Top Story
Patch Now: Cisco Firewall Management Flaw Exploited by Ransomware Gang
CISA added CVE-2026-20131 to its Known Exploited Vulnerabilities catalog on March 19, ordering federal agencies to remediate by March 22. The vulnerability — a CVSS 10.0 insecure deserialization flaw in Cisco Secure Firewall Management Center (FMC) — allows unauthenticated remote attackers to execute arbitrary code as root. Cisco published its advisory on March 4, but Amazon threat intelligence researchers confirmed the Interlock ransomware gang had been exploiting it as a zero-day since January 26, 2026 — 36 days before disclosure. No workarounds are available.
Why it matters: FMC is the centralized administration system for Cisco firewalls, intrusion prevention, URL filtering, and malware protection. Compromising it can give attackers control over an organization's entire firewall infrastructure. This is confirmed active exploitation in ransomware campaigns, not a theoretical risk.
What to do: Verify all Cisco FMC instances are patched to a fixed release immediately. If you cannot confirm patch status, assume compromise — hunt for indicators including unauthorized ScreenConnect installations and anomalous outbound HTTP PUT requests from FMC systems.
Sources: Cisco Security Advisory · CISA KEV Alert · AWS Threat Intelligence
Also Today
EU NIS2: Germany Registration Due This Month, Audit Deadlines Vary by Member State
NIS2 enforcement is live across the EU following the October 2024 transposition deadline. Germany requires in-scope organizations to register with BSI this month. Audit deadlines vary by member state — Hungary's first audit deadline is June 30, 2026. Penalties reach €10 million or 2% of global turnover for essential entities.
EU Cyber Resilience Act: Mandatory Reporting Starts September 11
Manufacturers of products with digital elements must begin mandatory vulnerability and incident reporting to ENISA by September 11, 2026. Initial reports are due within 24 hours, full details in 72 hours, and a final vulnerability report within 14 days.
FedRAMP OSCAL Mandate: April 15 Deadline for New Submissions
Cloud service providers seeking new FedRAMP authorization must submit machine-readable OSCAL-format packages by April 15. Existing authorized providers have until September 30 to transition.
Deadline Alert
April 15 — FedRAMP OSCAL-format packages mandatory for new submissions
April 27 — UK Cyber Essentials v3.3 effective
Sep 11 — EU CRA mandatory vulnerability/incident reporting begins
One Thing to Do Today
Confirm your Cisco FMC patch status. CVE-2026-20131 is a CVSS 10 with confirmed ransomware exploitation and no workarounds. If any FMC instance in your environment is unpatched, escalate immediately — the CISA remediation deadline has already passed.
Tomorrow's Focus
Tomorrow: Privacy & Data Protection — including Maryland's new MODPA enforcement and the latest state privacy law developments.
CyberEyeQ — Actionable Regulatory Intelligence
Contact us: [email protected]