Rogue peers and hidden exploits.

This CyberWire Daily roundup reports multiple active cybersecurity incidents: Five Eyes agencies warn that UAT-8616 is actively exploiting Cisco SD‑WAN vulnerabilities; ransomware attacks surged in 2025 even as payments fell; Polish and German authorities charge suspects for harvesting ~100,000 Facebook credentials; a researcher reportedly abused Anthropic’s Claude to exfiltrate sensitive Mexican government data; and other items include extortion related to the Conti gang and industry/regulatory developments.