// day
Feb 1, 2026
3 new incidents, 0 with updates.
## started
- criticalclosedpatchedclosed Feb 28, 2026
Cisco Catalyst SD-WAN zero-day campaign (CISA emergency directive)
› Cisco Catalyst SD-WAN Manager / controllers
In February 2026 CISA issued an emergency directive after exploitation of critical authentication-bypass and related flaws in Cisco Catalyst SD-WAN Manager/controllers. Cisco Talos said related activity dated back years; unauthenticated attackers could gain administrative privileges on exposed controllers.
- criticalclosedpatchedclosed Feb 28, 2026
European Commission & Dutch authorities hit via Ivanti EPMM zero-days
› Ivanti EPMM deployments (EU institutions)
February 2026: European Commission and Dutch DPA/Judicial Council confirmed breaches through critical Ivanti Endpoint Manager Mobile zero-days. Dutch incident exposed work contact data; Commission said it contained its breach within nine hours.
CVE-2026-1340 - unknownclosedpartial fixclosed Feb 28, 2026
UNC3886 breaches Singapore telecom providers (CYBER GUARDIAN)
› Singapore major telecom providers
In February 2026 Singapore’s CSA revealed China-linked UNC3886 had breached all four major telecom providers in a months-long espionage campaign using zero-days and rootkits. Singapore ran operation CYBER GUARDIAN to evict the actors.
