CISA sounds alarm over trio of exploited SharePoint flaws

Feed of security stories dominated by Microsoft/SharePoint issues and active exploitation: CISA warns of a trio of SharePoint flaws under active attack and flags two additional critical holes. Other major themes include Microsoft patching chaos (record CVE counts and a canceled Patch Tuesday for some Dell users), new post-compromise tooling and zero-days (LegacyHive), multi-family destructive malware (GigaWiper), widespread breaches and emergency vendor shutdowns (Progress ShareFile, Moody Bible Institute), exploitation of popular web extensions (Joomla), state-linked attacks (Poland power‑grd