Microsoft drops its second-largest monthly batch of defects on record

CyberScoop roundup: Microsoft’s April Patch Tuesday is its second-largest on record and includes an actively exploited zero-day in Microsoft Office SharePoint that can expose and modify disclosed information. Other notable stories: former Black Basta affiliates are running a fast-scale social-engineering intrusion campaign; OpenAI’s macOS apps require updates after an Axios supply‑chain compromise of a popular library; Censys warns an Iranian campaign has put ~3,900 U.S. energy, water and government-facing devices at risk; the FBI disrupted APT28 by taking down compromised routers; and several