SSF Cyber Defence Digest
Issue Date: 7 May 2026Reporting Period: 7 April 2026 – 7 May 2026
Cyber threat alerts for security professionals to assess emerging risks, evaluate potential exposure, and investigate further using official advisories and trusted technical sources.
⚠ Ivanti Endpoint Manager Mobile Vulnerability Exploited
Vulnerability Level: 🔴 Critical — Active ExploitationIncident Summary: Ivanti confirmed limited in-the-wild exploitation of a critical vulnerability affecting Endpoint Manager Mobile administrative interfaces.
Attack Vector: CVE-2026-6973 | Authenticated Remote Code Execution | Administrative Interface
Potential Impact: Enterprise server compromise | Administrative access | Lateral movement
Defence: Apply vendor security updates immediately, restrict administrative access, and review administrator activity logs.
⚠ Cisco Identity Services Engine Multiple Critical Vulnerabilities
Vulnerability Level: 🔴 CriticalIncident Summary: Cisco released multiple critical fixes for Identity Services Engine (ISE), addressing authentication and access-control vulnerabilities affecting enterprise deployments.
Attack Vector: Multiple CVEs | Authentication | Access Control
Potential Impact: Unauthorised administrative access | Identity infrastructure compromise | Enterprise network exposure
Defence: Prioritise Cisco ISE updates, restrict management interfaces, and review privileged account activity.
⚠ SAP Business Planning and Consolidation Remote Code Execution
Vulnerability Level: 🔴 CriticalIncident Summary: SAP addressed a critical remote code execution vulnerability affecting Business Planning and Consolidation and Business Warehouse environments.
Attack Vector: CVE-2026-27681 | Remote Code Execution | SAP Enterprise Applications
Potential Impact: Enterprise application compromise | Data exposure | Business disruption
Defence: Apply SAP Security Notes immediately, restrict administrative access, and monitor SAP application logs.
⚠ Adobe Acrobat and Reader Security Updates
Vulnerability Level: 🔴 CriticalIncident Summary: Adobe released security updates addressing multiple critical vulnerabilities, including previously exploited document-handling flaws.
Attack Vector: Multiple CVEs | Malicious PDF Documents | Memory Corruption
Potential Impact: Remote code execution | Endpoint compromise | User credential theft
Defence: Update Adobe Acrobat and Reader, restrict opening untrusted PDF files, and monitor endpoint security alerts.
⚠ Microsoft May Patch Tuesday
Vulnerability Level: 🟠 HighIncident Summary: Microsoft released fixes for 118 vulnerabilities, including sixteen rated Critical. No actively exploited Microsoft zero-days were reported during this cycle, providing an opportunity to improve patch compliance.
Attack Vector: Multiple CVEs | Remote Code Execution | Privilege Escalation | Office Components
Potential Impact: Enterprise compromise | Privilege escalation | Remote system access
Defence: Follow standard Patch Tuesday deployment procedures and prioritise Office, Windows, and internet-facing systems.