Critical Windows Netlogon RCE flaw now exploited in attacks

The feed highlights a critical Windows Netlogon remote code execution vulnerability that was recently patched and is now being actively exploited, according to Belgium's national cybersecurity agency. Other notable items: a Palo Alto GlobalProtect authentication-bypass (CVE-2026-0257) is being exploited in attacks; a WP Maps Pro plugin flaw is being abused to create admin accounts on WordPress sites; a new Linux local privilege escalation ("CIFSwitch") can yield root on multiple distributions; and threat actors are abusing ChatGPT share links to host fake outage pages that distribute malware.