It's looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns

News roundup: a surge in AI-assisted vulnerability discovery and exploitation is driving a ‘hot, messy’ period for security teams. Active incidents include exploitation of Cisco CVE-2026-20230, multiple critical Fortinet sandbox/SD-WAN vulnerabilities and a massive password-stealing campaign hitting ~75k Fortinet firewalls, the Miasma campaign poisoning 20+ npm packages to harvest developer secrets, an Amazon Q flaw that lets booby-trapped Git repos execute commands and steal cloud credentials, and a self‑destructing Mistic backdoor sold by an access broker to ransomware groups. Other notable: