#threat-actor-activity

#threat-actor-activity

Salesforce warned users of increased threat actor activity exploiting misconfigured publicly accessible sites and permissive guest user settings to gain unauthorized data access for social engineering and vishing campaigns.

Cisco Catalyst SD-WAN vulnerability CVE-2026-20127, initially exploited as a zero-day, now sees widespread internet-wide exploitation by multiple threat actors across global regions.