Cisco confirms exploitation of critical Unified CM flaw.

Top stories: Cisco confirmed active exploitation of a critical SSRF in Cisco Unified Communications Manager (CVE-2026-20230) that can lead to root escalation and has been added to CISA’s Known Exploited Vulnerabilities catalog; DHS is investigating a late-May/early-June intrusion that compromised the Homeland Security Information Network (HSIN) and an associated SharePoint environment; and a suspected Scattered Spider member was arrested and extradited to the U.S. for an extortionate breach of a luxury jewelry retailer that resulted in roughly $2M in losses and an $8M ransom demand.