Suspicious Polyfill login prompts pop up on Toshiba, Muji websites

Multiple active and high-impact threats reported: Cisco disclosed an actively exploited unpatched SD‑WAN zero-day (CVE-2026-20245) enabling root escalation; CISA warned of exploitation of a recently patched SolarWinds Serv‑U flaw to crash servers. Supply‑chain attacks continue — 36 npm packages hit with IronWorm infostealer, Hola Browser update compromised to deliver a cryptominer, and a Magecart campaign abusing Stripe to host skimmers/exfiltrated payment data. Browser‑layer and credential‑theft attacks are rising (suspicious polyfill login prompts on Toshiba/Muji, DBIR findings), while a中国 A