Amazon security boss says crims abused max-security Cisco firewall flaw weeks before disclosure

Collection of security headlines highlighting active exploitation of a maximum-severity Cisco Secure Firewall Management Center vulnerability (CVE-2026-20131) as a zero-day by ransomware actors prior to Cisco’s patch, with the disclosure also exposing the Interlock post-exploit toolkit. Feed also covers broad, high-impact trends: state-linked activity (Iran), growing AI-enabled cybercrime and agent risks, active exploitation of n8n RCE (CISA warning), Chrome zero-days, credential-stealing campaigns spoofing VPN clients (Storm-2561), and law-enforcement disruption of criminal proxy services (S​