Microsoft Patches Exploited SharePoint Zero-Day and 160 Other Vulnerabilities

SecurityWeek roundup: Microsoft released Patch Tuesday fixing an exploited SharePoint zero-day plus ~160 other CVEs (second-largest by CVE count). Adobe patched 55 flaws across 11 products, with critical ColdFusion bugs called most at risk. Separate warnings note exploited Windows and Adobe Acrobat vulnerabilities enabling privilege escalation and remote code execution. Major breach reports include Basic-Fit (≈1 million members’ personal and banking data), Booking.com (user booking data exposed), and RCI Hospitality (IDOR-exposed contractor data). SAP issued 19 security notes addressing a high