Cryptographers engage in war of words over RustSec bug reports and subsequent ban

A broad set of security stories: US authorities disrupted massive IoT botnets behind record 30+ Tbps DDoS floods; unknown actors are actively exploiting a new critical Microsoft SharePoint vulnerability in the wild; ransomware groups were observed exploiting a Cisco Secure Firewall zero-day (CVE-2026-20131) prior to public patching; Microsoft Intune was abused in an Iran-linked attack on med‑tech firm Stryker; a new iOS exploit kit (“Darksword”) is being used by spyware vendors and suspected state actors; multiple corporate breaches and phishing incidents (including Telus and Intuitive) and a