Did that Coachella appearance land him the gig?

After a very profitable decade on Microsoft’s board, Reid Hoffman is stepping down, the company announced Thursday. Hoffman joined the board after Microsoft bought his company LinkedIn for $26.2 billion in 2016.

Hoffman was on Microsoft’s board when it invested its first $1 billion into OpenAI in 2019. Hoffman was one of OpenAI’s original investors and served on the model maker’s board until he stepped down in 2023, citing too many potential conflicts of interest to continue. He was also on Microsoft’s board when the tech giant entered into one of those non-acquisition, acqui-hire deals for $650 million with his AI startup Inflection AI. Microsoft hired Inflection co-founder Mustafa Suleyman through that deal.

Hoffman said on a recent episode of his “Possible” podcast, while talking with Microsoft CEO Satya Nadella, that he’s ready to go “founder mode” with his latest AI startup, Manus. Manus is a drug discovery company that raised over $50 million through a couple of seed rounds last year. Hoffman is an investor, as is General Catalyst.

Hoffman is cited as a co-founder of Manus and chairman of the board, not the CEO, though. That job belongs to Dr. Siddhartha Mukherjee, a physician, biologist, and Pulitzer Prize-winning author of the 2011 book “The Emperor of All Maladies: A Biography of Cancer.”

Still, Hoffman said he’s excited to give Manus more attention.

“One of the things I realized over the last month was that, we’re seeing such progress with Manus. I need to get back to founder mode,” he said. He believes the startup is making progress on “Move 37” AI, meaning AI that supersedes human creativity in chemistry, especially to combat various cancers, he added.

We’ve been hearing about the 2026 FIFA World Cup for months, and it’s now upon us. 

There are more teams and host stadiums than ever this year, and tickets to World Cup matches have been a hot topic since they were first released, with many fans priced out, and transportation to the US and to the stadiums themselves becoming a barrier to attending for some. That’s why you’ll find me watching every match from the comfort of my home (or maybe at a local park or bar for a watch party) when the tournament begins on June 11. 

Matches will run daily until July 19, and this year, you’ll be able to watch them all on Fox and FS1. You can catch every single match in Spanish on Peacock, too.

Here’s a primer on everything else you might be wondering about this year’s World Cup, including which teams are playing, where matches will be held and who’s headlining the first-ever World Cup final halftime show. 

When is the 2026 FIFA World Cup?

This year’s World Cup begins on June 11 with a match between co-host Mexico and South Africa, to be held in Mexico City. 

There will be 48 teams playing in 104 matches over a little over a month. The championship final is scheduled to take place on Sunday, July 19, at New York New Jersey Stadium (aka MetLife Stadium), home to the NFL’s Jets and Giants, in East Rutherford, New Jersey. 

The group stage runs until June 27, after which the knockout stage begins. The Round of 32 will run from June 28-July 3, the Round of 16 is July 4-7, the quarterfinals are July 9-11 and the semifinals are July 14 and 15.

Which teams are in the 2026 FIFA World Cup?

This year’s World Cup is the biggest ever in terms of the number of clubs participating in the tournament. In a FIFA first, 48 teams have qualified, and, in another first, there are three host nations: Mexico, the US and Canada. Argentina returns to the pitch as the most recent World Cup champions, having defeated France in 2022. 

• Canada (host country)
• Mexico (host country)
• USA (host country)
• Algeria
• Argentina
• Australia
• Austria
• Belgium 
• Bosnia and Herzegovina
• Brazil
• Cabo Verde
• Colombia
• Congo DR
• Côte d’Ivoire 
• Croatia
• Curaçao
• Czechia
• Ecuador
• Egypt
• England
• France
• Germany
• Ghana 
• Haiti
• Iran
• Iraq
• Japan
• Jordan
• Morocco
• Netherlands
• New Zealand
• Norway
• Panama
• Paraguay 
• Portugal
• Qatar
• Saudi Arabia
• Scotland
• Senegal
• South Africa
• South Korea
• Spain
• Sweden
• Switzerland
• Tunisia
• Türkiye
• Uruguay
• Uzbekistan 

Players to watch at the 2026 World Cup

The top-ranked teams heading into the 2026 World Cup (in order) are France, Spain, Argentina and England, so naturally some of the top players to watch will be playing for those countries. 

At age 18, Lamine Yamal of Spain is one of the youngest players in this year’s series (he’ll actually celebrate his birthday midtournament). When he was 17, Yamal was the runner-up for the 2025 Ballon d’Or, the award recognizing the best international footballer of the year, losing to Ousmane Dembélé of France. Dembélé is headed into his third World Cup and is fresh off a UEFA Champions League win with his club, Paris Saint-Germain. 

Lionel Messi, one of the most famous soccer players in the world, returns this year as captain of the Argentina team (aka La Albiceleste), in what will likely be his final World Cup. Messi, 39, along with Cristiano Ronaldo, 41, are two of the oldest players in the tournament and among the most respected and renowned players of all time. Even if Messi doesn’t win a second consecutive title, his World Cup performances will likely be a highlight of the tournament. 

Harry Kane, captain of England, will also be one to watch. Kane is England’s all-time top goal scorer and indeed one of the top scorers in every league he has played in, with a staggering 61 goals in 51 games for Bayern Munich this season. However, a World Cup title has eluded Kane and England — they last won in 1966.

Fans will also have their eyes on Japan’s Kaishū Sano, whose performance as a midfielder in the Bundesliga has earned him praise, and Nico Paz, a midfielder on Argentina’s squad, known for his footwork and creative play. Paz, 21, is making history as the first player on the Argentina national team to play in the World Cup without ever having played for any of the nation’s football clubs.

Other names who could go big include Australia’s Nestory Irankunda and Ardon Jashari, a midfielder on Switzerland’s team who has made waves at AC Milan. 

Who’s performing at the FIFA World Cup final halftime show?

While we don’t yet know which teams will play in this year’s World Cup final match, we do know there will be world-class entertainment at halftime. 

With a roster that rivals some of the best Super Bowl halftime shows, the 2026 World Cup final show will be headlined by Madonna, Shakira and BTS. Having just one of these global artists would have been impressive, but all three will share the stage on Sunday, July 19, at MetLife Stadium. If those names weren’t enough, the performance will be curated by Chris Martin of Coldplay and, yes, I’ve buried the lede: the Muppets will also appear. 

Host cities at World Cup 2026

The US, Canada and Mexico are the host nations of this year’s tournament, and matches will be played in 16 cities across the three countries. The last time the US hosted the World Cup was in 1994; it was a simpler time back then, as that year, only 24 teams participated in matches across nine venues. Mexico has also previously hosted twice, in 1970 and 1986. This year, two venues are in Canada, three in Mexico and 11 in the US. 

One thing you’ll notice is that the venues have been temporarily renamed for the massive event, in line with FIFA’s branding guidelines. For example, Atlanta’s Mercedes-Benz Stadium is referred to as Atlanta Stadium, while Gillette Stadium in Foxborough, Massachusetts, is now Boston Stadium. 

A statement on the FIFA website explains: “All listed stadium capacities are preliminary at this stage and subject to change before the tournament. Stadium official names for the FIFA World Cup 2026 have been matched with Host City names and may differ from the common designation used locally.”

• Toronto Stadium (BMO Field)
• BC Place Vancouver
• Estadio Guadalajara (Estadio Akron)
• Estadio Monterrey (Estadio BBVA)
• Mexico City Stadium (Estadio Azteca)
• Atlanta Stadium (Mercedes-Benz Stadium)
• Boston Stadium (Gillette Stadium)
• Dallas Stadium (AT&T Stadium)
• Houston Stadium (NRG Stadium)
• Kansas City Stadium (Arrowhead Stadium)
• Los Angeles Stadium (SoFi Stadium)
• Miami Stadium (Hard Rock Stadium)
• New York New Jersey Stadium (MetLife Stadium)
• Philadelphia Stadium (Lincoln Financial Field)
• San Francisco Bay Area Stadium (Levi’s Stadium)
• Seattle Stadium (Lumen Field)

There are official World Cup songs, too

The first time I realized the World Cup had an official song was in 1998, when Ricky Martin’s Cup of Life (La Copa de la Vida) was released. The song was an international hit, and in the years since, the World Cup has expanded not just to include an official song but also an official playlist featuring songs from several music superstars. 

This year’s anthem, Dai Dai, a collaboration between Shakira and Nigerian singer/producer Burna Boy, has already racked up more than 65 million views on YouTube in its first two weeks, and is one of several singles on the soundtrack. Also out now is Game Time by Future and Tyla, Lighter by Jelly Roll and Mexican singer Carín León and Goals, a collab between international stars Lisa, Anitta and Rema.

Here’s a rundown of all the songs on the 2026 World Cup soundtrack; you can listen to playlists on Spotify and Apple Music:

• Dai Dai by Shakira and Burna Boy (Official Song)
• Goals by Lisa, Anitta and Rema
• Illuminate by Jessie Reyez and Elyanna
• Echo by Daddy Yankee and Shenseea
• Por Ella by Los Ángeles Azules and Belinda
• Lighter by Jelly Roll and Carín León
• Game Time by Future and TYLA

Where to watch World Cup 2026 matches

If you’re planning to watch all the action on TV at home, Fox will show every US Men’s National Team group match, plus every match from the round of 16 onward, including the championship final. You’ll be able to catch 34 additional matches on FS1. Fox and FS1 are available on services like DirecTV, YouTube TV and Fox One. 

For fans looking to watch matches in Spanish, every game will air on either Telemundo or Universo and will stream on Peacock. Free streaming service Tubi will also be showing the opening match on June 11 and USA vs. Paraguay on June 12.

Google looks like it’s experimenting with a small but potentially useful change to Chrome that could make searching the web feel much faster.

The feature, spotted in Chrome Canary (Google’s early testing version), is a floating search bar. It can be summoned anywhere on your desktop using a keyboard shortcut: Ctrl + Shift + Space on Windows and Linux, or Cmd + Shift + Space on macOS.

Instead of launching a full browser window, the shortcut brings up a compact search panel in the middle of the screen, much like Spotlight on macOS or Microsoft’s PowerToys Run on Windows. This will give you instant access to search without switching apps or tabs.

It will still behave just like Google Search, but the interface is designed to be a faster way to type a query.

Back at AXPONA 2026, the Ruark Talisman-R was my second favorite loudspeaker of the entire show. Not my second favorite “affordable” loudspeaker. Not my second favorite “interesting British thing hiding in a room people should have visited.”

My second favorite. Period.

The short list included ATC, Quad, Opera, and DeVore Fidelity; and somehow the Ruark Talisman-R, expected to land under $2,000, was right there with them.

That should make a few far more expensive loudspeakers look over their shoulders.

At the time, Ruark was still keeping some of the details close to the vest. The Talisman-R was not expected to be available until September, and while the compact floorstander sounded far more finished than “forthcoming product” usually suggests, we still did not have the full technical picture.

Now we do.

The Talisman-R has made its European debut at High End Vienna 2026, and the timing is not accidental. Ruark has also launched the new R710 Music Console, the more powerful R-Series component we were told about in confidence at AXPONA — the one being developed specifically to give the Talisman-R the drive, control, and system simplicity it deserved.

That matters because the Talisman-R was already being demonstrated with the smaller R610 at AXPONA, and it did not sound underfed. It sounded bold, articulate, wide, and far more composed than its compact footprint suggested. The R710 changes the equation by bringing substantially more power and a more serious all-in-one platform to the party.

The original story was that Ruark had revived one of its important loudspeaker names and built something that looked like a lifestyle product but behaved like a proper hi-fi speaker. The Vienna story is sharper: Ruark now has the matching electronics to turn the Talisman-R into a complete system.

And not some sad beige “just add speakers” lifestyle rig that apologizes for existing.

The Talisman-R Specs Are Here, and the Little Brit Has Teeth

The new Talisman-R is a compact two-way floorstanding loudspeaker rated at 87 dB sensitivity, with a 6-ohm nominal impedance that dips to 3.8 ohms at 5kHz. Ruark recommends amplifiers between 50 and 250 watts, which makes the arrival of the R710 rather convenient.

The speaker uses a 27mm silk dome tweeter with a neodymium motor and a 17cm / 6.5-inch Ruark NS+ long-throw woofer with a treated fibre cone, 35mm two-layer copper voice coil, and Strontium ferrite motor. The crossover is set at 2.2kHz and uses an optimized second-order design with premium audio film capacitors and low-loss inductors.

Bass output is handled by a dual-flared tuned bass-reflex cabinet with decoupled baffle technology. Cabinet volume is 14.5 litres / 0.51 cubic feet, with a tuning frequency of 42Hz. Ruark specifies frequency response at 40Hz to 22kHz in a typical room, which is exactly the kind of number that made the AXPONA demo feel more convincing than its size suggested.

Physically, the Talisman-R is very living-room friendly for a floorstander: 850mm high, 210mm wide, and 250mm deep, or roughly 33.5 x 8.3 x 9.8 inches. Each speaker weighs 17.6kg / 38.8 pounds. That is substantial enough to feel serious, but not so heavy that you need a friend to help you move them.

Connections are via dual gold-plated 4mm multi-way binding posts for single-wire or bi-wire use, compatible with banana plugs, spades, or bare wire. The removable magnetic grille uses acoustically transparent fabric, and buyers can choose between a Fused Walnut veneer baffle with Charcoal cabinet and mottled fabric grille, or a Satin Charcoal lacquer baffle with matching Charcoal cabinet and grille.

Each speaker ships with a quick start guide, adjustable rubber coned feet, and adjustable carpet spikes.

The Bottom Line

The Talisman-R gives Ruark Audio a proper floorstanding loudspeaker again, while the R710 supplies the power, connectivity, and system simplicity to make it feel fully current in 2026.

The Talisman-R impressed me at AXPONA because it sounded like a speaker built by people who still understand tone, scale, and restraint. It did not chase fake detail. It did not need a room full of glowing monoblocks and emotional support cables to make its point. It just played music with confidence.

Expect a full review once Fidelity Imports gets a pair into our hands. If the Talisman-R lands near $2,000, it could prove to be one of the stronger high-end floorstanding speaker values of 2026. And based on what I heard at AXPONA, the Ruark should not be locked into Ruark electronics only; it sounded like a speaker that will respond well to a range of properly matched amplifiers.

For more information: ruarkaudio.com

Related Reading:

Ruark has uncovered the R710 CD Hi-Fi Console at High End Vienna 2026, and the pitch is not hard to understand. This is a modern music centre inspired by the classic 1970s console era, but rebuilt for listeners who use CDs, streaming services, Internet Radio, Bluetooth, TV audio, headphones, and external loudspeakers in the same system.

The R710 joins Ruark’s growing 100 Series family alongside the R410 all-in-one system, R610 Music Console, and R810 High Fidelity Radiogram. It also arrives as Ruark continues expanding beyond compact lifestyle audio with the new Talisman-R floorstanding loudspeakers, which we previewed at AXPONA 2026. That context matters. The R710 is not just a pretty box with a slot-loading CD player hiding behind the wooden slats. It is Ruark making a stronger play for the listener who wants a complete hi-fi hub without building a shrine to black boxes and cable anxiety. These blokes are so thoughtful that they even include 10 feet of speaker cable in the packaging.

Built-In CD Playback Returns to the Console

The R710 includes an integrated slot-loading CD player that supports Red Book CD-DA and CD-R discs. That gives Ruark a clear point of separation from some of its other 100 Series products, where CD playback depends on an external component. If the internal CD player offers the playback quality of Ruark’s existing R-CD100 CD Player, the value of this console starts looking a lot better; like finding a clean seat on the Central line and realizing nobody has spilled lager on it.

Streaming, Internet Radio, AirPlay 2, and Google Cast

Ruark has loaded the R710 with the streaming options most users actually need. Apple AirPlay 2 and Google Cast are built in, along with Spotify Connect, TIDAL Connect, Qobuz Connect, and Internet Radio. The console is also UPnP/DLNA compatible for playback from networked media servers.

That combination makes the R710 flexible without forcing every user into one control method. Apple users, Android users, TIDAL users, Qobuz users, Spotify users, and Internet Radio listeners are all covered. Democracy, but with better woodwork.

Hi-Res Playback and Burr-Brown Digital Conversion

The R710 supports high-resolution audio up to 32-bit/192kHz, with FLAC, AIFF, ALAC, and WAV supported up to that resolution. MP3 is supported up to 48kHz/320kbps, while AAC is supported up to 96kHz/320kbps.

Ruark also specifies Burr-Brown 32-bit/192kHz DAC and ADC stages. That is useful because the R710 is not only dealing with digital sources. It also includes analog inputs, including a moving-magnet phono stage, so the quality of both digital-to-analog and analog-to-digital conversion matters inside the system.

400 Watts of Class D Amplification

The amplifier section is rated at 2 × 200 watts into 4 ohms at 0.01% THD. That gives the R710 considerably more drive than a typical compact all-in-one music system and positions it as a proper hub for passive loudspeakers.

Ruark also includes adjustable bass and treble, switchable Loudness EQ, and switchable Stereo+ processing. The goal is clearly not just source flexibility, but enough control to make the R710 work in much larger systems beyond the existing speaker lineup. Think Spendor, Neat, Q Acoustics, ProAc, Wharfedale, and Acoustic Energy.

HDMI ARC/eARC and Real System Connectivity

The R710 includes HDMI ARC/eARC, which makes it suitable for TV audio without adding a soundbar. It also includes optical input up to 24-bit/96kHz PCM, stereo RCA line input, RCA selectable line/pre-out, mono RCA subwoofer output, and gold-plated 4mm multi-way speaker binding posts.

There is also an MM phono input rated for cartridges up to 8mV, giving turntable owners a direct path into the system. That makes the R710 a more complete music console than the word “console” might suggest.

Bluetooth, Headphones, Wi-Fi, Ethernet, and USB-C

Wireless support includes Wi-Fi 802.11 a/b/g/n/ac/ax, Ethernet via RJ45, and Bluetooth 5.1 with aptX HD, SBC, and AAC. Ruark also includes Bluetooth headphone support and a 3.5mm wired headphone output.

The USB-C port provides 5V/1A charging and multi-format audio file playback. That gives the R710 another practical source option for listeners who still keep music on local storage rather than trusting everything to the cloud. A wise move. The cloud has commitment issues.

Display, RotoDial, and Physical Control

The R710 uses a 6.8-inch high-contrast colour TFT display with auto dimming, along with Ruark’s familiar RotoDial control system. A rechargeable wireless remote is included.

That interface matters because one of Ruark’s strengths has always been usability. The R710 is designed to be operated from the front panel, the remote, or modern streaming apps without making the user feel like they are configuring enterprise networking gear during a power outage.

Finishes, Dimensions, and What Comes in the Box

Ruark lists two standard finishes: Fused Walnut cabinet with Fused Walnut facia, and Charcoal Lacquer cabinet with Fused Walnut facia. The cabinet measures 105 x 375 x 310mm, or approximately 4.1 x 14.8 x 12.2 inches. Including feet, controls, and cables, it measures 125 x 375 x 345mm, or approximately 4.9 x 14.8 x 13.6 inches. Product weight is 6.6kg, or about 14.6 pounds.

Inside the box, Ruark includes the R710, a 2m AC power cable, quick start guide, rechargeable wireless remote, and two 3m oxygen-free copper 400-strand speaker cables.

The Bottom Line

The Ruark R710 CD Hi-Fi Console is not just another retro-inspired box with a pretty face. For £2,199, it combines a slot-loading CD player, 32-bit/192kHz hi-res support, AirPlay 2, Google Cast, Spotify Connect, TIDAL Connect, Qobuz Connect, Internet Radio, MM phono input, HDMI ARC/eARC, wired and Bluetooth headphone support, subwoofer output, and 2 × 200W of Class D amplification into one compact console.

What makes it unique is the mix: CD playback, modern streaming, TV integration, real loudspeaker power, and Ruark’s furniture-grade industrial design in one system. It is aimed at listeners who want fewer boxes without surrendering physical media or proper stereo playback.

U.K. pricing is £2,199, with Ruark working toward October availability. U.S. pricing has not been announced yet, which means American buyers will have to wait for the inevitable exchange-rate pain parade.

For more information: ruarkaudio.com

Related Reading:

SCIENCE

Business is back to normal in the orbital station, but one of two newly discovered leaks is still unrepaired

A serious air leak in the Russian segment of the ISS forced NASA astronauts to put on their spacesuits and shelter in their Dragon capsule for a brief period of time on Friday, but all appears to be safe for now and operations have resumed.

At around 1316 UTC Friday, NASA spokesperson Bethany Stevens announced that, after the crew discovered new leaks, Roscosmos had decided to do a repair operation. During this time, the US space agency ordered astronaut Chris Williams and the four-member SpaceX Crew-12 team into the Dragon spacecraft as part of a precautionary safe-haven procedure.

Reuters, citing an unnamed NASA official, said that leaks in the Russian section of the station escalated this week from around a pound of air a day to two pounds. A source The Register spoke with said that the latest discoveries were the longest cracks in the module they’d seen, though we’re still not clear on how large the cracks actually are. 

Approximately two hours later, Stevens confirmed that NASA had instructed crew members sheltering in a docked Dragon spacecraft to resume normal operations aboard the International Space Station after Roscosmos paused repair work in the Zvezda service module’s transfer tunnel, known as PrK.

The Roscosmos crew was planning to conduct repairs on the transfer tunnel on Friday, but Stevens said that the plan was paused in order to further assess “measurements and data” regarding the new leaks. 

“Given this development, NASA has instructed the crew members inside the Dragon spacecraft to end the safe haven procedures and return to planned operations aboard the International Space Station,” Stevens said. 

What’s life in space without some risks?

Just how big is this crack, exactly?

We’ve known about problems with Zvezda leaks for some time now, as Stevens noted.

“The cracks have always been a concern that NASA watches very closely,” the NASA mouthpiece said in Friday’s X post about the leak. “NASA and Roscosmos have been working to determine the root cause of the cracks, and Roscosmos manages the issue through operational mitigation measures and periodic partial-repair efforts.” 

The Register has been reporting on leaks in the Russian segment of the orbital lab since they were first identified in 2020. Multiple repair efforts over the past few years have failed to stop the leaks entirely, and newly identified cracks suggest the problem is continuing.

Russian news wire Interfax reported that cosmonauts identified two potential air leaks in the transfer chamber, one of which was sealed on Friday with a layer of Germetall-1 two-component sealant, but the second hasn’t been addressed yet. 

“Efforts are underway to prepare it for hermetic sealing,” Roscosmos said in a statement. 

We’ll update this story if we hear anything new from NASA, including whether the continued leaks, with cause unknown, could lead to an early retirement for the station. ®

What you’re reading started as yet another takedown of Universes Beyond.

Maybe not a takedown, but certainly something fuelled by fatigue.

Solo Stove makes some of the best smokeless fire pits, including the Ranger, Bonfire and Yukon backyard fire pits. But if you’re looking for something a little smaller, it also makes a line of tabletop fire pits, including the Mesa and Mesa XL. Both come in several color options, including traditional stainless steel. 

I started off using the smaller Mesa, but when the Mesa XL was subsequently released, I moved to the larger version of the mini fire pit (pictured on the left) because it looks and feels a little more substantial while remaining compact. (As you might expect, it does produce a bigger fire with a heat radius of 2 to 3 feet compared with the Mesa’s 1 to 2 feet.) 

As its name implies, the Mesa XL is designed to sit on a tabletop and is quite portable. Naturally, you could also set it on the ground, but when you put it on a table, it’s at a good height for comfortably roasting marshmallows. It has the same 360-degree Signature Airflow system as Solo Stove’s larger fire pits.

security

Good luck, sys admins

The threat is real. Unknown miscreants are exploiting a high-severity, zero-day bug in Cisco’s SD-WAN management software, and the networking giant hasn’t said when it will patch the flaw.

Cisco issued an advisory on Thursday for the Catalyst SD-WAN Manager vulnerability, tracked as CVE-2026-20245, and it sounds like attackers have been exploiting this security failure for at least the last week.

It’s due to a validation error – the software fails to properly validate user-supplied input – and an authenticated, local attacker can exploit the flaw by uploading a specially crafted file to vulnerable systems. From there, they can escalate privileges and execute commands with root privileges.

The vulnerability affects all versions of the SD-WAN software, regardless of device configuration, and across all deployment types including on-premises, cloud-based, and FedRAMP-certified deployments.

Switchzilla says it became aware of attacks against this vulnerability in June.

“To exploit this vulnerability, an attacker must have netadmin privileges on an affected system,” the vendor said. “This would require valid credentials or exploitation of CVE-2026-20182 or CVE-2026-20127. Cisco is not aware of successful exploitation by other methods.”

Both of these earlier SD-WAN security holes have also been hit by attackers in previous months.

The good news: an attacker needs valid credentials to abuse the new hole. The bad news: exposed credentials aren’t hard to find (or buy) online.

We don’t know the scope of exploitation or exactly when attackers began hitting this SD-WAN hole. Cisco declined to answer The Register’s questions, and instead sent us a statement via email.

“Cisco recommends customers upgrade to the fixed software released in May 2026 for CVE-2026-20182 as a protective measure,” a spokesperson said. “A patch for this vulnerability will be provided on a future date. Customers needing assistance should contact Cisco TAC.”

This latest bug is the sixth SD-WAN vulnerability listed as under attack since the start of the year, and the second zero-day in two months.

The most recent is the one the Cisco spokesperson mentioned in an email to The Register.

In May, Switchzilla disclosed a max-severity make-me-admin bug (CVE-2026-20182) affecting Catalyst SD-WAN Controller and Manager, and warned that attackers had already found and exploited the hole before it issued a patch.

A month earlier, America’s lead cyber-defense agency said that three Cisco Catalyst SD-WAN Manager bugs (CVE-2026-20128, CVE-2026-20133, and CVE-2026-20122) were under attack, and gave federal agencies just four days to patch the security holes.

Cisco fixed all three CVEs in late February, and in March warned of attackers abusing two of them.

Also in February, the networking vendor patched a max-severity improper authentication flaw (CVE-2026-20127) affecting the same SD-WAN software, prompting a Five Eyes countries’ joint intelligence alert urgently warning defenders to patch it – plus an old SD-WAN vulnerability (CVE-2022-20775) – or risk root takeover. 

“Malicious cyber threat actors are targeting Cisco Catalyst SD-WAN used by organizations globally,” the UK’s lead cyber agency said at the time. “These actors are compromising SD-WANs to add a malicious rogue peer and then conduct a range of follow-on actions to achieve root access and maintain persistent access to the SD-WAN.”

And while this one isn’t listed as under active exploitation (yet), on Wednesday, Cisco warned about a proof-of-concept exploit for CVE-2026-20230, a critical bug in its Unified Communications Manager that also allows attackers to gain root privileges. ®