Active exploitation of SonicWall, SharePoint, and AD FS systems leads today’s server-risk priorities, alongside Russian router targeting and a Rockwell flaw capable of affecting industrial I/O states.