CISA is running on empty.

This CyberWire Daily roundup highlights multiple active cybersecurity issues: widespread exploitation of a Zimbra Collaboration Suite vulnerability, CISA adding a critical Oracle flaw to its Known Exploited Vulnerabilities catalog (with guidance to patch), a large DDoS outage impacting Norwegian public services, the emergence of a phishing toolkit that persists through password resets and deploys attacker-controlled passkeys, allegations of illegal AI server exports from Taiwan to China, and a global law enforcement operation targeting cybercrime networks — alongside industry commentary and ancillary stories about browser fingerprinting and AI-generated music policy.