Suspicious Polyfill login prompts pop up on Toshiba, Muji websites

Multiple active and emerging threats reported: suspicious polyfill-based login prompts on Toshiba and Muji sites used for credential theft; CISA warns of active exploitation of a recently patched high-severity SolarWinds Serv-U flaw to crash servers; Cisco reports an actively exploited, unpatched SD‑WAN zero-day (CVE-2026-20245) enabling root escalation. A Chinese APT (UNC5221) is deploying Brickstorm plus new Plenet and AgentPSD malware to maintain Microsoft 365 access. Large-scale exposures and supply-chain incidents include 900+ US automatic tank gauge (ATG) systems exposed, 36 npm packages