Google loses final appeal to overturn €4.1 billion EU fine

Multiple high-impact incidents and active exploitation trends were reported across enterprise and cloud environments. CISA warned of an actively exploited Microsoft SharePoint RCE patched in May 2026; Cisco confirmed active exploitation of a patched Unified Communications Manager vulnerability. OAuth-based MFA bypass techniques (ConsentFix, ClickFix) are being used to quickly steal Microsoft 365 tokens, prompting browser mitigations such as Opera’s Paste Protect. Large credential-theft and misuse campaigns were also observed: the FortiBleed campaign tied to INC/Lynx ransomware, an 81 million‑+