Six unpatched Windows exploits in the wild, Cisco SD-WAN control planes under siege, Red Hat's npm namespace hit by a CI/CD worm, and GTIG confirms the first AI-generated zero-day. Plus: post-quantum ransomware, DPRK taking 76% of all crypto stolen in 2026.