Cybersecurity News | Daily Recap [19 Mar 2026] Daily Recap, active exploits include Microsoft SharePoint deserialization RCE (CVE-2026-20963) being exploited in the wild against unpatched SharePoint Server 2016/2019/Subscription, and Interlock ransomware leveraging a Cisco Secure FMC zero-day (CVE-2026-20131) before patching. It also notes CISA directives to patch Zimbra XSS (CVE-2025-66376) and patches across WebKit (CVE-2026-20643) and UniFi (CVE-2026-22557), ongoing Marquis and Aura breaches, and policy moves involving China, DPRK, and Volt Typhoon. #SharePointFlaw #InterlockRansomware #CiscoFMC #ZimbraXSS #WebKitPatch #UniFiFlaw #TelnetdRCE #ScreenConnectPatch #MarquisBreach #AuraBreach #DarkSwordKit #PerseusMalware #Stryker #Handala #China #DPRK #VoltTyphoon

Active exploits target Microsoft SharePoint RCE (CVE-2026-20963) and Cisco Secure FMC zero-day (CVE-2026-20131) used by Interlock ransomware. CISA urges patches for Zimbra XSS and UniFi flaws amid Marquis and Aura breaches. #SharePointFlaw #CiscoFMC

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch Chinese threat actors exploited a patched SharePoint flaw, CVE-2025-53770, in global espionage attacks.

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch
thehackernews.com/2025/10/chin...

#Infosec #Security #Cybersecurity #CeptBiro #Chinese #ThreatActors #Exploit #ToolShell #SharePointFlaw

CISA: Second SharePoint Flaw Disclosed at Pwn2Own Exploited in Attacks CISA says a second SharePoint vulnerability demonstrated last year at Pwn2Own, CVE-2023-24955, has been exploited in the wild.

CISA: Second SharePoint Flaw Disclosed at Pwn2Own Exploited in Attacks
www.securityweek.com/cisa-second-...
#Infosec #Security #Cybersecurity #CeptBiro #CISA #SharePointFlaw #Pwn2Own