Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)

Help Net Security reports multiple active and high-impact cyber threats, including nearly 22,000 exposed Microsoft Exchange servers affected by critical authentication-bypass CVE-2026-62911; active exploitation of a Sangoma Switchvox SQL injection vulnerability (CVE-2026-9586); and in-the-wild zero-day exploitation of SonicWall SMA 1000 flaws CVE-2026-83548 and CVE-2026-83549. Additional coverage includes OAuth consent phishing targeting prominent individuals, a battery-grid cyberattack scenario, disruption of the long-running Sality botnet, and defensive fraud and security product releases.