The art of being ungovernable
2026-05-26T20:51:49Z•290f2889a3ff5a8417a79a42669128d65b5343a9dcb9fc9fafb0b600f5c28049
What happened
Cisco Talos published a May 2026 feed covering multiple vulnerability disclosures and threat research: vendor patches for several TP-Link flaws and individual issues in Adobe Photoshop, OpenVPN, and Norton VPN; active exploitation of CVE-2026-20182 (authentication bypass) in Cisco Catalyst SD‑WAN controllers; discovery of a BadIIS commodity MaaS ecosystem (identifiable by demo.pdb strings); a China‑nexus APT tracked as UAT‑8302; and an intrusion using CloudZ RAT with a new “Pheno” plugin that may steal OTP messages. The feed also highlights Microsoft’s May 2026 Patch Tuesday (137 fixes, 16 “cr
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisco_talos
- Record identifier
- 290f2889a3ff5a8417a79a42669128d65b5343a9dcb9fc9fafb0b600f5c28049
- Enrichment time
- 2026-05-26T20:51:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.