Fake PoCs, Misunderstood Risks Cause Cisco SD-WAN Chaos

This DarkReading digest highlights a dense, active threat landscape: multiple high-impact vulnerability disclosures and patches (Microsoft’s March update, Cisco firewall bundle with two critical flaws, and an exploited VMware Aria Operations command-injection) alongside active exploitation and supply-chain compromise (Xygeni GitHub Action tag-poisoning, Tycoon 2FA takedown). Nation-state activity and geopolitically motivated campaigns (Iranian and China-linked actors, DPRK social-engineering enhancements) and ransomware/targeted crime (INC ransomware in Oceania, Brazil Pix banking Trojan) are,