Active exploitation is hitting AI compute, virtualization, remote-access and cyber-physical control surfaces while new GitLab, GeoServer and SAP risks widen the patch queue. Today’s priority is compromise assessment, trust recovery and emergency remediation.