In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw

Multiple actively exploited vendor and supply-chain vulnerabilities and large-scale campaigns are dominating the news cycle. Notable incidents include rapid weaponization of a Cisco Unified CM (CUCM) SSRF that allows privilege escalation to root, exploitation of a Cisco SD‑WAN flaw before disclosure, mass credential‑harvesting campaigns targeting Fortinet/FortiGate devices (FortiBleed-related activity), an Oracle ERP zero‑day abused by threat actors, and ongoing supply‑chain/OAuth abuses (Klue → Salesforce). Additional high-risk items include fileless and kernel‑abusing malware (Phantom steale