The art of being ungovernable

This Cisco Talos feed (May 2026) aggregates multiple posts covering active exploitation and vulnerability disclosures, malware tracking, and security research. Notable items: ongoing exploitation of CVE-2026-20182 (authentication bypass in Cisco Catalyst SD‑WAN Controller/Manager); disclosures of multiple vulnerabilities in TP-Link, Adobe Photoshop, OpenVPN, and Gen Digital (Norton VPN) that vendors have patched; discovery of a BadIIS commodity ecosystem (identified by embedded "demo.pdb" strings) likely operated as malware-as-a-service among Chinese-speaking actors; disclosure of UAT-8302, a