CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks
2026-03-19T07:24:32Z•6621a2f00cb4c675464cdbb3ba658e3e2ba27bcdc067e8cebf2817fd3ceb93f5
CISADPRKOFACactive-exploitationcredential-theftinsecure-deserializationprivilege-escalationransomwareremote-code-executionsame-origin-bypassstored-xsssupply-chain-compromisezero-day
What happened
Multiple high/critical vulnerabilities and active exploitation campaigns reported: CISA urged patching of Synacor Zimbra and Microsoft SharePoint flaws; Interlock ransomware is actively exploiting a Cisco FMC zero‑day (CVE-2026-20131) for unauthenticated root; a critical GNU InetUtils telnetd RCE (CVE-2026-32746) enables unauthenticated root execution; Ubuntu systemd timing bug (CVE-2026-3888) allows local privilege escalation; Apple patched a WebKit same-origin bypass (CVE-2026-20643); CISA added Wing FTP info‑leak (CVE-2025-47813) to its KEV list. Other notable incidents include OFAC‑sanctio
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 6621a2f00cb4c675464cdbb3ba658e3e2ba27bcdc067e8cebf2817fd3ceb93f5
- Enrichment time
- 2026-03-19T07:24:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.