Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131)

Multiple high‑impact security stories: A critical zero‑day in Cisco Secure Firewall Management Center (CVE-2026-20131) was actively exploited by the Interlock ransomware gang beginning Jan 26, 2026—36 days before Cisco’s public disclosure and patch, according to Amazon’s MadPot honeypot telemetry. Separately, ConnectWise patched a critical ScreenConnect flaw (CVE-2026-3564) that allowed remote forging of authentication via ASP.NET machine keys, enabling session hijacking. Law enforcement disrupted four large IoT botnets tied to record DDoS attacks (up to ~30 Tbps). Other notable items: Googleʼ