Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOS-CX

Multiple high‑impact vulnerabilities and active campaigns were reported: HPE patched a critical authentication bypass in Aruba AOS‑CX (CVE‑2026‑23813, CVSS 9.8) that allows admin password resets; attackers are exploiting FortiGate devices to exfiltrate configurations and credentials; and the KadNap botnet has compromised 14,000+ edge devices (mostly ASUS routers) to act as a stealth proxy. Additional notable items include Microsoft’s March Patch Tuesday (84 fixes), CISA additions to the Known Exploited Vulnerabilities catalog, long‑running APT28 espionage using BEARDSHELL and COVENANT, mass‑sc