Two Months Inside: What the Cisco SD-WAN Zero-Day Reminds Us About Quiet Intrusions For at least two months, attackers were operating inside Cisco Catalyst SD-WAN environments before the vulnerability was public. There was no patch yet, and nothing pointing defenders toward where to look. Cisco has since confirmed attackers were exploiting CVE-2026-20245 in the wild, … Continue reading Two Months Inside: What the Cisco SD-WAN Zero-Day Reminds Us About Quiet Intrusions