“`html

---

⚠ Ivanti Endpoint Manager Mobile Vulnerability Exploited

Vulnerability Level: 🔴 Critical — Active Exploitation
Incident Summary: Ivanti confirmed limited in-the-wild exploitation of a critical vulnerability affecting Endpoint Manager Mobile administrative interfaces.
Attack Vector: CVE-2026-6973 | Authenticated Remote Code Execution | Administrative Interface
Potential Impact: Enterprise server compromise | Administrative access | Lateral movement
Defence: Apply vendor security updates immediately, restrict administrative access, and review administrator activity logs.

---

⚠ Cisco Identity Services Engine Multiple Critical Vulnerabilities

Vulnerability Level: 🔴 Critical
Incident Summary: Cisco released multiple critical fixes for Identity Services Engine (ISE), addressing authentication and access-control vulnerabilities affecting enterprise deployments.
Attack Vector: Multiple CVEs | Authentication | Access Control
Potential Impact: Unauthorised administrative access | Identity infrastructure compromise | Enterprise network exposure
Defence: Prioritise Cisco ISE updates, restrict management interfaces, and review privileged account activity.

---

⚠ SAP Business Planning and Consolidation Remote Code Execution

Vulnerability Level: 🔴 Critical
Incident Summary: SAP addressed a critical remote code execution vulnerability affecting Business Planning and Consolidation and Business Warehouse environments.
Attack Vector: CVE-2026-27681 | Remote Code Execution | SAP Enterprise Applications
Potential Impact: Enterprise application compromise | Data exposure | Business disruption
Defence: Apply SAP Security Notes immediately, restrict administrative access, and monitor SAP application logs.

---

⚠ Adobe Acrobat and Reader Security Updates

Vulnerability Level: 🔴 Critical
Incident Summary: Adobe released security updates addressing multiple critical vulnerabilities, including previously exploited document-handling flaws.
Attack Vector: Multiple CVEs | Malicious PDF Documents | Memory Corruption
Potential Impact: Remote code execution | Endpoint compromise | User credential theft
Defence: Update Adobe Acrobat and Reader, restrict opening untrusted PDF files, and monitor endpoint security alerts.

---

⚠ Microsoft May Patch Tuesday

Vulnerability Level: 🟠 High
Incident Summary: Microsoft released fixes for 118 vulnerabilities, including sixteen rated Critical. No actively exploited Microsoft zero-days were reported during this cycle, providing an opportunity to improve patch compliance.
Attack Vector: Multiple CVEs | Remote Code Execution | Privilege Escalation | Office Components
Potential Impact: Enterprise compromise | Privilege escalation | Remote system access
Defence: Follow standard Patch Tuesday deployment procedures and prioritise Office, Windows, and internet-facing systems.

---

Shilpa Sayura Cyber Defence Research Lab

Editorial Note: This digest provides an intelligence starting point. Security teams should confirm product exposure and consult official vendor advisories before taking remediation action. “`