Microsoft tries to knife passwords once and for all - at least for consumers

A security roundup reports multiple high-severity active threats: SAP NetWeaver was exploited and added to CISA's known-exploited catalog; several other critical CVEs (including Apache mod_rewrite and Commvault) are noted; Apple AirPlay 'AirBorne' vulnerabilities enable RCE and malware spread across devices; a six-year-old Magento supply-chain backdoor is actively impacting 500–1,000 ecommerce stores; the FBI published a historical list of ~42,000 LabHost domains; and Raytheon settled claims over federal cybersecurity compliance failures.