CISA shares advice on isolating vital systems during cyberattacks

A cybersecurity news digest covering critical vulnerabilities, active exploitation, exposed infrastructure, ransomware and data breaches, botnet activity, supply-chain attacks, phishing and cryptomining campaigns, and defensive guidance. Notable items include actively exploited zero-days in FastJson and VeloCloud Orchestrator, a critical pre-authenticated vBulletin RCE with public exploit code, widespread BMC password-hash exposure, an Active Directory Certificate Services proof of concept, a 200,000-device DDoS botnet, and major healthcare and enterprise data breaches.