White House authorizes private US companies to hack foreign criminal networks

Security news digest covering active exploitation of Microsoft SharePoint CVE-2026-55040 after public proof-of-concept release, active exploitation of Cisco firewall vulnerability CVE-2026-20349 enabling denial of service, a major LiteLLM supply-chain compromise exposing 153 GB of credentials and CI runner data, and the growing scale of automated multi-vector DDoS campaigns exceeding 1 Tbps. Additional items address government-authorized offensive cyber operations by vetted private companies and enterprise AI governance products.