Google releases new privacy controls for activity history, personalization

BleepingComputer items from 23–24 Jun 2026 describe multiple actively exploited vulnerabilities and notable incidents: Mandiant details how attackers abused a Cisco Catalyst SD‑WAN zero‑day (CVE-2026-20245) to create rogue root accounts; a high‑severity SSRF in Cisco Unified Communications Manager (CVE-2026-20230) is being exploited in the wild; CISA warns of active exploitation of critical Ubiquiti UniFi OS and Lantronix serial‑to‑ethernet flaws. A malicious Microsoft Edge extension (“Edgecution”) abused Native Messaging to escape the browser sandbox and deploy a Python backdoor/ransomware. A