Attackers Hit Cisco SD-WAN Flaw 2 Months Before Disclosure

This DarkReading digest highlights an active surge in high-impact exploits, credential theft campaigns, and supply-chain/AI threats. Notable incidents include attackers exploiting a Cisco SD‑WAN flaw (used for rogue peering to gain admin/root access prior to disclosure), large-scale FortiGate/Fortinet credential-harvesting campaigns (including FortiBleed-style sniffers to collect millions of credentials), and continued Salesforce data thefts leveraging compromised third-party apps (Klue/OAuth tokens). Multiple zero-days and rapid post-disclosure exploitation were reported (Ivanti, Oracle), and