Russian national charged in connection with Void Blizzard espionage campaign

Multiple high-impact cyber developments: U.S. prosecutors charged Denis Obrezko for leading the Kremlin-linked ‘Void Blizzard’ espionage campaign that compromised at least 11 U.S. companies. Cisco SD‑WAN is reporting an actively exploited zero-day (referenced as CVE-2026-20245) with no vendor patch yet. Microsoft released a record 206 Patch Tuesday vulnerabilities, and CISA issued a binding remediation directive (BOD 26-04) that forces prioritized patching (including a three-day requirement for vulnerabilities meeting all four criteria). Separately, OpenAI flagged a likely China-linked online/