CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks

CISA warned that high-severity vulnerabilities in Synacor Zimbra (CVE-2025-66376) and Microsoft SharePoint (CVE-2026-20963) are being actively exploited and urged immediate patching by federal agencies; the report also notes Amazon’s disclosure that Interlock ransomware actors weaponized a Cisco firewall management zero-day (CVE-2026-20131), underlining a pattern of attackers targeting edge/network devices to gain initial access and pressure critical sectors.