Residential proxies make a mockery of IP-based defenses

This collection highlights multiple active and emerging security risks: a critical FortiClient EMS zero‑day (CVE-2026-35616) is being exploited in the wild and Fortinet has issued emergency hotfixes; Cisco Integrated Management Controller has an auth‑bypass allowing remote admin access (CVE-2026-20093); attackers are leveraging residential proxy networks to mask malicious traffic and evade IP‑based reputations; a leaked Claude Code repository has been used to distribute malware lures; and supply‑chain attacks (e.g., npm/LiteLLM) continue to pose widespread risk. Also featured: guidance to use/