CISA warns of actively exploited RCE flaws in Joomla extensions

US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals

Microsoft said exploitation was 'less likely' ... but CISA just added SharePoint RCE to KEV list

CISA: Microsoft SharePoint RCE flaw now actively exploited