Cisco SD-WAN - Border Cyber Group

Critical Infrastructure Threat Intelligence Briefing

Today’s server-security outlook centers on exploited control planes, internet-exposed industrial controllers, and critical vendor patches. The common risk is concentrated administrative trust: one exposed management layer can create multi-site operational impact.

06 Aug 2026 N-central exploitation TeamCity KEV ChainDrop npm worm water utility PLCs Cisco SD-WAN Langflow RCE Entra device code phishing Veeam vulnerabilities

Threat Intelligence Briefing

Today’s threat picture centers on compromised control planes: RMM, build servers, package publishing, water controllers, network management, and backup consoles. The common question is not only what was patched, but what trust boundary may already have been crossed.

05 Aug 2026 N-able N-central TeamCity RCE MSP security critical infrastructure cyberattack water system cybersecurity operational technology security Cisco SD-WAN server vulnerability management

Critical Infrastructure Threat Intelligence Briefing

Active exploitation of N-central, a critical TeamCity flaw, expanding water-sector attacks, and new Cisco advisories reinforce one lesson: systems that manage, build, route, or control other systems demand immediate protection and post-patch investigation.

04 Jul 2026 Cyber Week in Review Control Plane Security Identity Abuse SharePoint Exploitation Cisco SD-WAN Secure Messaging Threats Ransomware Tradecraft AI Cyber Governance

The Week in Review: Edge Control, Identity Abuse, and the Collapse of Clean Boundaries

This week’s cyber pattern was trust under attack: SD-WAN, SharePoint, secure messaging, research environments, admin tools, and AI policy all showed attackers targeting the systems organizations rely on to establish control, identity, and confidence.

04 Jul 2026 CVE-2026-45659 Argo CD Cisco SD-WAN CVE-2026-8037 NetScaler SimpleHelp RMM FortiBleed ColdFusion Oracle-Peoplesoft

BCG Threat Intelligence Brief

Active exploitation pressure hit SharePoint, ColdFusion, SimpleHelp, PeopleSoft, and edge infrastructure while Argo CD and supply-chain findings show attackers moving upstream into control planes, deployment systems, and trusted admin tooling.