Unknown attackers exploit yet another critical SharePoint bug

A cluster of active, high-impact cyber incidents and vulnerabilities was reported: unknown attackers are exploiting a newly disclosed critical Microsoft SharePoint bug; ransomware actors abused a maximum-severity zero-day in Cisco Secure Firewall Management Center (CVE-2026-20131) prior to patching; Google rushed Chrome updates to fix multiple zero-days already under active attack; and the Darksword iOS exploit kit is being used by spyware vendors and suspected state actors. Separately, an Iran-linked campaign abused Microsoft Intune in the Stryker intrusion prompting US guidance to harden Int