Max severity Adobe ColdFusion flaw now exploited in attacks

Multiple active exploitation and high-impact incidents reported: a maximum-severity Adobe ColdFusion vulnerability (CVE-2026-48282) is being actively exploited, CISA warns of an actively exploited Microsoft SharePoint RCE, and Cisco confirmed exploitation of a Unified Communications Manager flaw. Other notable activity includes a documented AI-agent–driven ransomware operation (JadePuffer), disruption of the NetNut residential proxy botnet, exposure of the ARToken phishing-as-a-service toolkit tied to EvilTokens, and fast OAuth/MFA bypass techniques (ConsentFix/ClickFix). Additional items: Med