Five Eyes agencies warn of maximum-severity Cisco vulnerability.

Five Eyes agencies warn of active exploitation of critical Cisco SD‑WAN vulnerabilities (CVE-2026-20127 — CVSS 10.0 — and CVE-2022-20775) with guidance and hunt materials published and CISA ordering federal mitigations; researchers report the attacker chained the flaws to obtain administrative/root access. Separately, a hacker used AI tools (Anthropic's Claude and OpenAI's ChatGPT) to assist breaches of multiple Mexican government agencies, exfiltrating roughly 150 GB of sensitive records, and SolarWinds released patches for high-severity Serv‑U RCE flaws; the bulletin also notes legal and leadership developments related to spyware and CISA.