Max severity Ubiquiti UniFi flaw may allow account takeover

BleepingComputer roundup: multiple high- and maximum-severity vulnerabilities and active exploit campaigns were reported. Ubiquiti patched two UniFi Network Application flaws including a maximum-severity account-takeover issue; Cisco Secure FMC RCE has been exploited in zero-day ransomware attacks; a critical Microsoft SharePoint flaw is now under active exploitation; and CISA ordered feds to patch an actively exploited Zimbra XSS. Other notable incidents include CISA guidance after a Microsoft Intune compromise used against Stryker, the Perseus Android malware harvesting user notes, the DarkS