2026-05-15: Cisco SD-WAN faces its sixth exploited zero-day of 2026 with CVE-2026-20182 granting attackers

Show Notes - 2026-05-15

Stories Covered

• Today:
• Cisco Catalyst SD-WAN Controller Authentication Bypass (CVE-2026-20182) [Critical Alerts]
• Windows Zero-Day BitLocker Bypass (YellowKey) [Critical Alerts]
• Microsoft Exchange Zero-Day (CVE-2026-42897) [Critical Alerts]
• Foxconn North American Facilities Hit by Nitrogen Ransomware [Ransomware & Extortion]
• KongTuke Pivots to Microsoft Teams for Social Engineering [Ransomware & Extortion]
• Widespread Cisco SD-WAN Exploitation by Multiple Threat Clusters [Business & Infrastructure Threats]
• OpenAI Supply Chain Breach via TanStack Attack [Business & Infrastructure Threats]
• AI Application Misconfigurations Create Exploitable Attack Paths [Business & Infrastructure Threats]
• Windows Privilege Escalation Zero-Day (GreenPlasma) [Windows / AD Security]
• Federal Identity Security Critical in Age of AI [Windows / AD Security]
• Pwn2Own Berlin 2026 Day 1: $523,000 in Rewards for 24 Zero-Days [General Security News]
• Linux Kernel Privilege Escalation Vulnerability (Fragnesia - CVE-2026-46300) [General Security News]
• Secret Blizzard's Kazuar Evolves into Modular P2P Botnet [General Security News]
• Siemens Industrial Control Systems (Multiple Products) [Vulnerability Disclosures]
• GnuTLS Authentication Bypass and Name Constraint Issues [Vulnerability Disclosures]
• Twisted DNS Denial of Service [Vulnerability Disclosures]

CVEs Referenced

CVE-2024-4367, CVE-2024-54017, CVE-2025-12659, CVE-2025-22871, CVE-2025-40833, CVE-2025-40949, CVE-2025-48804, CVE-2026-20122, CVE-2026-20127, CVE-2026-20128, CVE-2026-20133, CVE-2026-20182, CVE-2026-25786, CVE-2026-25787, CVE-2026-25789, CVE-2026-27446, CVE-2026-33825, CVE-2026-33862, CVE-2026-33893, CVE-2026-40175, CVE-2026-41551, CVE-2026-42010, CVE-2026-42011, CVE-2026-42304, CVE-2026-42897, CVE-2026-44411, CVE-2026-44412, CVE-2026-46300

Read the full brief