Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched

The feed highlights a surge of actively exploited and high-severity vulnerabilities across widely used products plus multiple large-scale campaigns. Key items include three Microsoft Defender zero-days (BlueHammer, RedSun, UnDefend) under active exploitation, CISA addition of Apache ActiveMQ CVE-2026-34197, critical nginx-ui authentication bypass CVE-2026-33032 in the wild, and large patch rolls (Microsoft Patch Tuesday) and advisories (Cisco, SAP, PHP Composer). The collection also reports significant malware and abuse campaigns (PowMix botnet, Mirax Android RAT, malicious Chrome extensions,n