Iran-linked MuddyWater deploys Dindoor malware against U.S. organizations

Security Affairs feed reports multiple high-impact cyber events: Iran-linked MuddyWater (SeedWorm) deployed a new Dindoor backdoor against U.S. organizations across sectors; Cisco warned of active in-the-wild exploitation of two recently patched Catalyst SD‑WAN vulnerabilities (CVE-2026-20128 and CVE-2026-20122) and urged patching; Microsoft disclosed a ClickFix campaign abusing Windows Terminal and social engineering to deliver Lumma Stealer; Iran-nexus Dust Specter targeted Iraqi officials with new malware families (SPLITDROP, TWINTASK, TWINTALK); CISA added multiple vulnerabilities (incl. i