<p><strong>TLDR:</strong> Cisco has disclosed CVE-2026-20245, an actively exploited root privilege escalation in Catalyst SD-WAN Manager with no patch available yet — Mandiant reported it, and all deployment types including FedRAMP are affected. The <a href="http://polyfill.io" target="_blank" rel="noopener nofollow">polyfill.io</a> domain is active again after its 2024 supply chain compromise, now serving HTTP 401 responses that trigger browser login prompts on sites like Toshiba and Muji that never cleaned up the old script tag. CISA added CVE-2026-28318 in SolarWinds Serv-U to its KEV catalog, with over 12,000 servers exposed on Shodan and a June 19 federal patch deadline. A whistleblower lawsuit accuses IBM of concealing APT10 breaches that hit its core network 56,000 times between 2013 and 2016.</p>
<hr>
<h2>Cisco Catalyst SD-WAN Manager: CVE-2026-20245 actively exploited, no patch yet</h2>
<p>Mandiant reported CVE-2026-20245 to Cisco PSIRT — a high-severity local privilege escalation in Catalyst SD-WAN Manager that lets any attacker with netadmin privileges execute arbitrary commands as root by uploading a crafted file. All deployment types are affected: on-prem, cloud, and FedRAMP. No fix exists yet; Cisco’s interim guidance is to upgrade to the build that addresses the related CVE-2026-20182 and check for compromise using published IOCs. This is the latest in a long string of actively exploited Cisco SD-WAN flaws — CISA has flagged 90 Cisco CVEs as exploited in the wild in recent years, so treat this as a pattern, not a one-off. <a href="https://app.daily.dev/feed-by-ids?id=Y5x7rn4pH&amp;id=TM6UbhVZz" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2><a href="http://Polyfill.io" target="_blank" rel="noopener nofollow">Polyfill.io</a> back online, triggering login prompts on sites that never removed the script</h2>
<p>The <a href="http://polyfill.io" target="_blank" rel="noopener nofollow">polyfill.io</a> domain — seized in the 2024 supply chain attack when a Chinese entity injected malicious scripts into over 100,000 websites — went active again in late May 2026. It’s now responding with HTTP 401 authentication challenges, causing browsers to pop login dialogs on any site still loading the old script tag. Toshiba, Muji, Zojirushi, FiNC Technologies, and Samsung Smart TV sites are among the confirmed affected. No credential theft has been confirmed yet, but the attack surface is every user who visits one of those pages. If you haven’t audited your third-party script inventory since 2024, now is the time. <a href="https://app.daily.dev/posts/ppl2wCqf7" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>SolarWinds Serv-U CVE-2026-28318 added to CISA KEV, 12,000+ servers exposed</h2>
<p>CISA confirmed active exploitation of CVE-2026-28318, an unauthenticated DoS in Serv-U file transfer software triggered by POST requests with Content-Encoding: deflate headers. SolarWinds released Serv-U 15.5.4 Hotfix 1. Shodan shows over 12,000 Serv-U instances exposed to the internet right now. Federal agencies have until June 19 to patch; everyone else should treat that deadline as a forcing function. If you can’t patch immediately, restrict access to known IPs and block POST requests containing the content-encoding header. <a href="https://app.daily.dev/posts/yW8vSu17o" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>IBM whistleblower: APT10 breached core network 56,000 times, company never notified US agencies</h2>
<p>A whistleblower lawsuit unsealed this week alleges that Chinese hacking group APT10 penetrated IBM’s core network 56,000 times between 2013 and 2016, and that IBM — a major federal cybersecurity vendor — never notified US government agencies. Former IBM VP of threat intelligence William Barlow also claims subsidiaries Trusteer and Truven were breached and covered up. IBM denies wrongdoing and notes the DOJ declined to intervene when the suit was filed in 2020. The allegations are unproven, but the structural concern — a federal security vendor concealing state-actor intrusions from the agencies it serves — is worth watching as the case proceeds. <a href="https://app.daily.dev/posts/m7sAv9afS" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Creative Sound Blaster Katana V2X: unauthenticated BLE firmware reflash, vendor won’t patch:</strong> A researcher found the Katana V2X allows anyone within Bluetooth range to reflash firmware over BLE with no pairing or authentication required, and the replacement firmware can emulate a USB keyboard — turning the speaker into a keystroke injector into any connected host; Creative’s official position is that this is not a vulnerability, and no patch is planned. <a href="https://app.daily.dev/posts/mqjzzGFTP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>IronWorm npm worm: 36 packages, eBPF rootkit, now confirmed targeting AI API keys:</strong> JFrog and OX Security confirmed IronWorm infected 36 npm packages with roughly 32,000 monthly combined downloads, stealing cloud keys, npm tokens, SSH keys, and AI API keys via a Rust infostealer with an eBPF kernel rootkit and Tor-based C2 — this was covered in the previous digest but the AI API key targeting and the Shai-Hulud lineage connection are newly detailed today. <a href="https://app.daily.dev/posts/CPXV5Iw4v" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Claude Code MCP OAuth token theft via malicious npm post-install hook:</strong> Mitiga Labs documented an attack where a malicious npm package rewrites ~/.claude.json on install, redirecting MCP OAuth traffic to attacker infrastructure and stealing bearer tokens for Jira, GitHub, and Confluence — requests appear to originate from Anthropic’s legitimate egress IPs, making audit log detection nearly impossible; Anthropic declined to patch, so monitor ~/.claude.json for unexpected changes and rotate OAuth tokens for all Claude Code integrations. <a href="https://app.daily.dev/posts/p4enNANEW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bundler 4.0.13 adds gem cooldown to close supply chain injection window:</strong> Bundler 4.0.13 introduces an opt-in cooldown that blocks resolving to gem versions published within the last N days, targeting the narrow window attackers exploit after compromising a maintainer account — complementing existing 2FA and trusted publishing controls. <a href="https://app.daily.dev/feed-by-ids?id=YWJKnXskM&amp;id=cGPo3ejK7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AMD ROCm DRM ioctl disabled in Linux 7.1 after four failed CVE-2026-23149 fix attempts:</strong> The GEM change handle ioctl used for CRIU checkpoint/restore with ROCm workloads is being disabled in Linux 7.1 and backported to stable kernels after four failed patches involving race conditions, variable aliasing errors, and missing error handling — impact is limited to users relying on checkpoint/restore for AMD ROCm containers. <a href="https://app.daily.dev/posts/RO77Ds0NQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


CVE disclosures, supply-chain attacks, security incidents, and developer-facing security tooling.

Security Digest

A security digest covering four major incidents: Cisco Catalyst SD-WAN Manager has an actively exploited root privilege escalation (CVE-2026-20245) with no patch yet, affecting all deployment types including FedRAMP. The polyfill.io domain is active again after its 2024 supply chain compromise, now triggering browser login prompts on sites like Toshiba and Muji that never removed the old script tag. CISA added a SolarWinds Serv-U unauthenticated DoS (CVE-2026-28318) to its KEV catalog with 12,000+ exposed servers and a June 19 federal patch deadline. A whistleblower lawsuit alleges APT10 breached IBM's core network 56,000 times between 2013–2016 and IBM concealed it from US agencies. Also covered: a Creative Sound Blaster BLE firmware reflash vulnerability the vendor won't patch, an npm worm targeting AI API keys with an eBPF rootkit, Claude Code MCP OAuth token theft via malicious npm post-install hooks, Bundler 4.0.13 gem cooldown for supply chain defense, and AMD ROCm DRM ioctl disabled after four failed CVE fixes.

Cisco SD-WAN zero-day exploited with no patch, polyfill.io resurfaces on live sites