Daily Briefing for 02.26.26

Five Eyes agencies and Cisco Talos report active exploitation of a maximum-severity authentication-bypass flaw (CVE-2026-20127, CVSS 10.0) in Cisco SD-WAN, with attackers chaining a downgrade to exploit CVE-2022-20775 for root access; CISA issued an urgent remediation directive. Separately, a threat actor allegedly used AI assistants (Claude and ChatGPT) to plan and execute intrusions that exfiltrated ~150 GB of sensitive Mexican government data, and Russian authorities accuse an individual of extorting members of the Conti ransomware gang.