UK school’s network left wide open for invasion, student found

A wave of active incidents and high-impact disclosures dominated The Register’s security feed: Cisco vulnerabilities (including CVE-2026-20230) are being actively exploited and additional SD‑WAN/Catalyst zero-days reported; Fortinet appliances and sandboxes suffered mass attacks and critical flaws; nation-state actors infiltrated Australian critical infrastructure and long-term PRC‑linked intrusions targeted medical and military research networks; large-scale credential and data exposures (KDDI: ~14.2M managed email credentials; 75k Fortinet firewalls hit) and multiple extortion/heist events (