The Pentagon suspends CMMC Phase II requirements.

This report summarizes multiple high-priority cybersecurity developments: the Pentagon paused CMMC Phase II compliance requirements; Microsoft fixed a record 570 vulnerabilities including two actively exploited zero-days; a stripped-down proof-of-concept (LegacyHive) for Windows privilege escalation was released by researcher "Nightmare Eclipse"; CISA warns of actively exploited SharePoint remote-code-execution CVEs and urges immediate patching; and Five Eyes and European partners attribute SNMP-based router compromise activity targeting critical infrastructure to Russia's FSB.