---

⚠ Microsoft Office SharePoint Zero-Day Under Active Exploitation

Vulnerability Level: 🔴 Critical — Active Exploitation
Incident Summary: Microsoft confirmed active exploitation of a SharePoint spoofing vulnerability during April Patch Tuesday.
Attack Vector: CVE-2026-32201 | Spoofing | Microsoft Office SharePoint
Potential Impact: Information manipulation | Enterprise SharePoint compromise | Trust exploitation
Defence: Apply April Microsoft security updates immediately and prioritise internet-facing SharePoint deployments.

---

⚠ Microsoft Defender Privilege Escalation Zero-Day

Vulnerability Level: 🔴 Critical — Public Disclosure
Incident Summary: Microsoft patched a privilege escalation vulnerability in Microsoft Defender that could allow attackers to obtain SYSTEM privileges.
Attack Vector: CVE-2026-33825 | Local Privilege Escalation | Microsoft Defender
Potential Impact: SYSTEM-level access | Credential theft | Security control bypass
Defence: Deploy Defender platform updates immediately and verify endpoint protection is current.

---

⚠ Cisco Secure Firewall Critical Vulnerabilities

Vulnerability Level: 🔴 Critical
Incident Summary: Cisco released multiple critical security advisories affecting Secure Firewall Management Center, ASA and FTD software.
Attack Vector: Multiple CVEs | Remote Code Execution | Firewall Management Services
Potential Impact: Firewall compromise | Administrative access | Network disruption
Defence: Prioritise Cisco security updates and restrict external access to firewall management interfaces.

---

⚠ Ivanti Endpoint Manager Exploited in the Wild

Vulnerability Level: 🔴 Critical — Active Exploitation
Incident Summary: An authentication vulnerability affecting Ivanti Endpoint Manager was reported as being actively exploited.
Attack Vector: CVE-2026-1603 | Unauthenticated Access | Endpoint Management Server
Potential Impact: Enterprise management server compromise | Administrative access | Lateral movement
Defence: Upgrade affected systems immediately, restrict management interfaces, and monitor administrator activity.

---

⚠ Chrome Zero-Day Exploitation Continues

Vulnerability Level: 🔴 Critical — Active Exploitation
Incident Summary: Google issued additional emergency updates for actively exploited Chrome vulnerabilities affecting Chromium browsers.
Attack Vector: CVE-2026-5281 | Browser Exploitation | Malicious Web Content
Potential Impact: Remote code execution | Endpoint compromise | Browser sandbox escape
Defence: Verify Chrome and Chromium-based browsers are updated across all managed endpoints.

---

Shilpa Sayura Cyber Defence Research Lab

Editorial Note: This digest provides an intelligence starting point. Security teams should confirm product exposure and consult official vendor advisories before taking remediation action.