Security boss thought MFA would be too much security

Roundup of recent infosec news from The Register covering multiple high-impact incidents and research: Cisco vulnerabilities (including CVE-2026-20230) and SD‑WAN 0‑days under active exploitation; large-scale Fortinet password‑stealing and critical sandbox bugs; a self‑destructing ‘Mistic’ backdoor tied to an access broker selling corporate footholds to ransomware gangs; nation‑state compromise of Australian critical infrastructure; mass credential exposure at Japanese telco KDDI (14.2M managed emails); researchers releasing a BootROM (checkm8‑style) exploit for A12/A13 iPhones and Mythos’ ‘Sq