2026-06-16: Cisco patches its eighth SD-WAN zero-day of the year

Show Notes - 2026-06-16

Stories Covered

• June 16, 2026
• Today:
• Cisco Catalyst SD-WAN Manager Arbitrary File Write (CVE-2026-20262) [Critical Alerts]
• Google Chrome V8 Zero-Day (CVE-2026-11645) [Critical Alerts]
• Oracle PeopleSoft Zero-Day Exploited by ShinyHunters (CVE-2026-35273) [Critical Alerts]
• LiteSpeed cPanel Plugin Privilege Escalation (CVE-2026-54420) [Critical Alerts]
• Mackay Sugar Ransomware Attack Shuts Down Mills [Ransomware & Extortion]
• FulcrumSec Leaks Novo Nordisk Data After $25M Demand Goes Unpaid [Ransomware & Extortion]
• Conti Ransomware Developer Pleads Guilty [Ransomware & Extortion]
• Microsoft 365 Copilot SearchLeak Vulnerability (CVE-2026-42824) [General Security News]
• 1,500+ Arch Linux Packages Compromised With Malware [General Security News]
• FBI Takes Down Outsider PhaaS Enterprise [General Security News]
• ShinyHunters Claims Council of Europe Hack [General Security News]
• North Korean Hackers Target Developers With Malicious Tools [General Security News]
• Chinese APT UNC6508 Targets US Medical and Academic Research [General Security News]
• Jaguar Land Rover Ordered 30,000 Staff Password Resets After Cyberattack [General Security News]
• VHDX File Delivers Remcos RAT [Vulnerability Disclosures]
• Linux-PAM Timing Attack (CVE-2026-54411) [Vulnerability Disclosures]
• Microsoft Edge Chromium CVE Batch [Vulnerability Disclosures]

CVEs Referenced

CVE-2026-11640, CVE-2026-11645, CVE-2026-11662, CVE-2026-11668, CVE-2026-11677, CVE-2026-11684, CVE-2026-11685, CVE-2026-11688, CVE-2026-11693, CVE-2026-12010, CVE-2026-12012, CVE-2026-12016, CVE-2026-12019, CVE-2026-20262, CVE-2026-2441, CVE-2026-35273, CVE-2026-3909, CVE-2026-3910, CVE-2026-42824, CVE-2026-5281, CVE-2026-54411, CVE-2026-54420

Indicators of Compromise

IP Addresses: 20.9.9.2, 20.12.7.2, 20.15.4.5, 20.15.5.3, 20.18.3.1, 26.1.1.2, 5.3.2.0

Read the full brief