Active exploitation is targeting SharePoint, SonicWall, FortiSandbox and AD FS, while new OpenSSL, NGINX and Rockwell flaws raise serious availability and physical-safety concerns. Here is the defensive action administrators should take now.