Cisco IMC auth bypass vulnerability allows attackers to alter user passwords (CVE-2026-20093)

Help Net Security roundup covering several incidents and product updates: Cisco patched ten IMC vulnerabilities, including CVE-2026-20093 — an unauthenticated remote authentication-bypass that can grant Admin access and permit password changes. Other notable stories: a Trivy supply-chain compromise enabled a 340 GB cloud breach of European Commission sites (data leaked by ShinyHunters); Anthropic’s Claude Code source leak was abused to distribute malware; Microsoft added Secure Boot certificate status indicators ahead of 2026 certificate expirations; APERION released the on‑prem SmartFlow SDK;