The art of being ungovernable

This Cisco Talos feed aggregates recent threat intelligence and research: active exploitation of CVE-2026-20182 (authentication bypass in Cisco Catalyst SD‑WAN Controller/Manager); multiple third‑party vulnerability disclosures (TP‑Link, Adobe Photoshop, OpenVPN, Norton VPN) that have been patched; discovery of a BadIIS commodity malware ecosystem (identified by embedded "demo.pdb" strings) likely operating as MaaS; an ongoing APT campaign tracked as UAT‑8302 targeting governments; and a CloudZ RAT intrusion deploying a new "Pheno" plugin that may steal OTP messages. It also highlights the May