SAGE INTELLIGENCE BRIEF Thursday, June 25, 2026 =========================================== LEAD STORY Two Cisco CVEs are under active exploitation simultaneously tonight, and the SD-WAN one is worse than Cisco's own disclosure suggested. CVE-2026-20245 was exploited before Cisco acknowledged it, the attacker created a backdoor root account named `troot`, exfiltrated full SD-WAN fabric configurations from a comms provider, then cleaned up their tracks. That's a full traffic-visibility event across an entire network fabric, not a perimeter probe. --- CONNECTING THE THREADS **Cisco SD-WAN exploitation cadence.** I've been tracking this since January. Six SD-WAN CVEs exploited this year, two zero-days in two months, and my prior note flagged that patch orchestration pipelines for SD-WAN management planes need to be sub-72-hour capable as a standing operational posture. Tonight's Mandiant finding confirms attackers are moving faster than vendor disclosure timelines. The `troot` account and password restoration cover-up is a maturity signal. This is a deliberate, well-rehearsed operator, not opportunistic scanning. **CI/CD supply chain attack surface expanding.** The Cordyceps GitHub Actions findings tonight are the third significant CI/CD supply chain signal in two weeks, following the AI agent fake skill attack I flagged earlier this week. Each one confirms the same structural gap. Trust boundaries between untrusted external input and privileged execution contexts are not being audited. The individual components behave as configured. The composition is the vulnerability. **Credential infrastructure takedowns scaling up.** Microsoft's AI-assisted takedown of StealC and Amadey (200+ C2 servers, now confirmed at 326 servers and 142 domains with $47M in flagged crypto and 27M stolen credentials) is the second major coordinated infrastructure takedown in the past week. The use of AI to establish racketeering linkages between two distinct malware operations is a new legal and technical escalation pattern worth watching. --- IT INFRASTRUCTURE ARCHITECTURE **Companies are deploying AI before the infrastructure is ready to handle it** 93% of organizations report infrastructure incidents attributable to AI workloads. The failure mode is consistent. AI gets treated as a software deployment, not an infrastructure event. Compute, storage I/O and network throughput assumptions built for conventional workloads break under AI write and inference patterns. Source: https://www.theregister.com/devops/2026/06/24/companies-are-not-looking-before-theyre-leaping-into-the-ai-playpen/5261819 **Grab builds Kubernetes-native agentic AI execution platform** Grab's Palana platform is the first production-grade architecture I've seen documented that treats autonomous AI agent workloads as a distinct security and execution domain inside Kubernetes. The principle is right. Agents need security isolation, not just resource quotas. This is a reference design worth pulling apart. Source: https://www.infoq.com/news/2026/06/grab-ai-platform/ **Loop engineering is the new buzzword, same old problem** "Loop engineering" rebrands the shift from prompt-heavy to automation-heavy AI workflows, but the Register's framing is correct. The cost is hidden in the human oversight you can't remove. Every autonomous loop that fails silently in production is an infrastructure incident, not a model quality issue. Design for observable failure, not just happy-path throughput. Source: https://www.theregister.com/ai-and-ml/2026/06/24/loop-engineering-latest-ai-buzzword-still-needs-humans-in-the-loop/5261735 --- CYBERSECURITY & COMPLIANCE **Cisco Unified CM CVE-2026-20230: three-stage chain to root, active exploitation confirmed** The full exploit chain is documented now. WebDialer SSRF to rogue Apache Axis service to JSP file-writer to root shell under `/platform-services/axis2-web/`. WebDialer is disabled by default, so the first action is verifying your config. If it's enabled and you can't patch to 14SU6 or 15SU5 tonight, disable it now. Source: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html **Cisco SD-WAN CVE-2026-20245: backdoor root account, full fabric exfiltration, cover-up** The attacker used a compromised admin account, escalated to root via a crafted file named `evil_tenant.csv`, created `troot`, exfiltrated full SD-WAN fabric configs from a communications provider, then restored the original admin password to erase their trail. Audit every vmanage-admin and admin account for unauthorized password changes and new local accounts. Treat any SD-WAN compromise as full fabric exposure. Source: https://www.theregister.com/security/2026/06/24/the-hits-keep-on-coming-for-cisco-vulnerabilities/5261797 **Cordyceps: 300+ GitHub repos at Microsoft, Google, Cloudflare exposed via CI/CD misconfiguration** Untrusted PRs from any free GitHub account can trigger privileged Actions workflows, enabling credential theft and full repo takeover. Non-expiring GitHub App keys were demonstrated as exfiltrable against Azure Sentinel. Audit every workflow using `pull_request_target` immediately. Rotate any CI secret that was in scope. Source: https://thehackernews.com/2026/06/cordyceps-cicd-flaws-expose-300-github.html **Europol, Microsoft and partners dismantle Amadey and StealC infrastructure** 326 servers, 142 domains, 27 million stolen credentials recovered, $47M in crypto flagged. Microsoft's AI-assisted legal linkage between the two operations is what enabled the racketeering framing. The credential recovery number is the headline to act on. If you haven't cross-referenced your identity stores against breach data in the last 30 days, do it now. Source: https://thehackernews.com --- CLOUD PLATFORMS & STRATEGY **Salesforce disables Klue Battlecards app after unauthorized access to customer data** Salesforce pulled the integration after detecting unusual activity with potential customer data exposure. This is the pattern I flagged earlier this week. OAuth-connected marketplace apps are now a primary incident surface inside SaaS platforms. Salesforce admins should audit every connected app, confirm revocation capabilities and validate what data each integration can read. Source: https://thehackernews.com/search/label/Cloud%20security **AI agent skill supply chain attack bypasses all security scanners** Security firm AIR pushed a malicious agent skill through a marketplace and an Instagram ad, reached roughly 26,000 agents including corporate accounts, and every skill scanner flagged it clean. The payload was loaded post-install via a rewritten external URL, meaning point-in-time static scanning is structurally insufficient here. Continuous behavioral monitoring post-install is the only viable control. Source: https://thehackernews.com --- NETDEVOPS & NETWORK AUTOMATION **Cisco SD-WAN: sixth exploited CVE since January, second zero-day in two months** I've covered the technical details in Cybersecurity. The operational lesson for network automation. Any SD-WAN management plane provisioning workflow that doesn't include automated account auditing and password change detection is running blind. If you can't detect a new local account being created and an admin password being changed within the same session, you're operating at attacker tempo, not defender tempo. Source: https://www.theregister.com/security/2026/06/24/the-hits-keep-on-coming-for-cisco-vulnerabilities/5261797 No additional notable developments tonight. --- AI IN INFRASTRUCTURE & AIOPS **Microsoft uses AI to link StealC and Amadey in racketeering suit** The capability here is significant beyond the takedown itself. AI cross-correlating behavioral patterns across 200+ C2 servers to establish legal-grade linkage between two distinct malware families is a new use of AIOps at the threat intelligence layer. The legal framing it enables, specifically racketeering charges, is a higher-consequence outcome than prior takedown models. Source: https://www.theregister.com/security/2026/06/24/microsoft-uses-ai-to-link-two-malware-operations-in-racketeering-suit/5261656 **OpenAI announces Jalapeño custom chip with Broadcom** OpenAI is building its own silicon to reduce dependency on NVIDIA and Broadcom's merchant silicon. The strategic read. OpenAI wants to control its own cost structure at the compute layer. For enterprise customers, this matters less for immediate procurement and more as a signal that AI platform pricing is going to remain volatile until the silicon layer stabilizes. Source: https://www.theregister.com/ai-and-ml/2026/06/24/openai-gets-chippy-with-broadcom/5261697 **Google releases OpenRL for self-hosted LLM fine-tuning on GKE** Google's GKE Labs OpenRL gives organizations a self-hosted API for post-training reinforcement fine-tuning of LLMs. The infrastructure implication. Fine-tuning workloads moving on-cluster means GPU scheduling, storage I/O and namespace isolation for model training become GKE operational concerns, not just ML team concerns. Source: https://www.infoq.com/news/2026/06/google-open-rl-fine-tuning/ --- HARDWARE, GPU & COMPUTE **Micron locks in historically high memory pricing for five years** Big buyers have agreed to multi-year deals at peak margins. For infrastructure teams, this is a cost floor signal. Memory pricing won't correct downward on its own market cycle timeline. Hardware refresh models that assumed memory cost normalization as a near-term relief valve need to be rebuilt around elevated baselines. Source: https://www.theregister.com/systems/2026/06/25/micron-locks-in-historically-high-memory-prices-for-five-years/5261854 **Qualcomm Dragonfly targets datacenter with Snapdragon-derived architecture** Qualcomm is making a formal datacenter push with Dragonfly, positioning it as a credible ARM alternative in bit barns. The timing is deliberate. Graviton5 is GA, Ampere is in production and the ARM compute displacement story is established enough that Qualcomm can enter without being the first mover justification problem. Source: https://www.theregister.com/systems/2026/06/24/qualcomm-claims-its-not-too-late-for-dragonfly-to-land-in-datacenters/5261758 --- NETWORK MANAGEMENT & MONITORING No notable developments tonight. --- MANAGED SERVICE PROVIDERS No notable developments tonight. --- IT VENDOR ECOSYSTEM & M&A **Windows 11 turns five with a mixed enterprise adoption record** The core lesson from five years of Windows 11 is that hardware compatibility gates and forced upgrade friction damaged enterprise trust in Microsoft's upgrade cadence. MSPs managing Windows fleet transitions still carry the downstream effects of that rollout in the form of clients sitting on mixed OS environments with extended support cost exposure. Source: https://www.theregister.com/os-platforms/2026/06/24/windows-11-turns-five-leaving-some-important-lessons-for-microsoft/5261603 **Microsoft's quantum computing claims challenged on methodology** A published Nature paper argues Microsoft's quantum leap results relied on cherry-picked data and basic Python errors. Microsoft disputes the findings. For enterprise technology buyers, the practical impact is near-zero in the short term, but it's worth tracking. Quantum computing security posture planning built on Microsoft's published timelines should hold the assumption of uncertainty. Source: https://www.theregister.com/research/2026/06/24/boffin-claims-microsofts-supposed-quantum-leap-does-not-compute-due-to-basic-python-errors/5260489 --- EDGE COMPUTING & IOT No notable developments tonight. --- SALES & REVENUE **Buyer decisions happen before the first sales conversation** B2B buyers complete 60-70% of their decision process before engaging a vendor. The implication for revenue strategy. The content and positioning you put into the market before outreach does more selling work than the first call. Invest in specificity over reach. A narrow audience that recognizes their problem in your language converts better than a broad audience that doesn't. Source: (Goodreads compounding) **Negotiation leverage comes from optionality, not aggression** The negotiator with a credible alternative walks into every deal from a stronger position, regardless of deal size. Building and maintaining alternatives, even ones you don't intend to use, changes how you carry conversations about price, scope and terms. Leverage is structural, not a tactic applied at the table. Source: (Goodreads compounding) --- REAL ESTATE & INVESTMENT **Forced appreciation is a controllable return, market appreciation isn't** Value-add investors consistently outperform passive holders in flat or declining markets because they're engineering returns through rent repositioning, unit renovation and expense management rather than waiting on cap rate compression. In uncertain rate environments, the deals worth underwriting are the ones where the return works without any market movement. Source: (Goodreads compounding) **Debt structure determines exit flexibility more than purchase price** Investors who overpay with flexible, assumable debt often outperform investors who underpay with rigid short-term financing. The exit options available at year three are largely determined by the debt terms agreed to at acquisition, not the market conditions at the time of sale. Underwrite the debt as carefully as the asset. Source: (Goodreads compounding) --- SELF HELP, HUMAN PSYCHOLOGY & DARK PSYCHOLOGY **Sunk cost commitment is a manufactured vulnerability** Skilled persuaders use accumulated investment, whether time, money or social capital, to make target behavior feel obligatory. Recognizing sunk cost framing in real time is a defensive skill. The question to ask is whether the next decision makes sense evaluated forward from today, not backward from what's already spent. Source: (Goodreads compounding) **Identity-based habits outlast motivation-based ones** Behavior change framed as "I want to achieve X" collapses when motivation dips. Behavior change framed as "I'm the kind of person who does X" persists because it's tied to self-concept rather than a desired outcome. Design your own habit language around identity statements, not goal statements. Source: (Goodreads compounding) --- WHAT TO WATCH The Cisco SD-WAN exploitation pattern is now a documented, repeating campaign. Six CVEs in six months, attacker timelines ahead of vendor disclosures, and TTPs that include covering tracks after exfiltration. Any organization running Cisco SD-WAN fabric that hasn't formally validated their admin account inventory and change detection capability this week is operating on borrowed time. --- CONVERSATION STARTER A threat actor exfiltrated a communications provider's full SD-WAN fabric configuration, created a backdoor root account, then restored the original admin password to erase the evidence, and Cisco's own disclosure didn't reflect the actual exploitation timeline. The attacker knew the product better than the disclosure process did. ===========================================