Webinar: Why account takeovers remain one of the hardest threats to stop

A roundup of BleepingComputer stories covering active exploitation, major breaches, and defensive updates. Highlights include Mandiant’s analysis of a Cisco Catalyst SD‑WAN zero‑day (CVE‑2026‑20245) used to create rogue root accounts, active exploitation of a Cisco Unified CM SSRF (CVE‑2026‑20230), and a CISA alert about actively exploited high‑severity Ubiquiti flaws. Other items: a malicious Edge extension (‘Edgecution’) abusing Native Messaging to deliver backdoors/ransomware, disruption of Amadey/StealC infrastructure in Operation Endgame, emergence of the Mistic backdoor tied to access‑tr