This one’s for you, Mom

Cisco Talos published multiple March 2026 advisories and blog posts covering active exploitation and disclosures: an active exploitation of CVE-2026-20127 (Cisco Catalyst SD‑WAN Controller) that allows unauthenticated attackers administrative access; disclosed/fixed vulnerabilities in Microsoft DirectX, OpenCFD OpenFOAM, and the BioSig Libbiosig library (one DirectX issue noted as unpatched at time of writing); Microsoft Patch Tuesday March 2026 (79 vulnerabilities, three rated critical); new APT activity (UAT-9244) targeting South American telecom providers and a separate campaign (UAT-10027)