Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access
Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.
A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire
Also: the twice-convicted contractors who deleted 96 government FOIA databases when they got fired and then Googled how to erase the logs, and Cisco's SD-WAN had an undetected root-access zero-day for months.