The vendor issued an emergency fix on Sunday, and eCommerce websites should update ASAP to avoid Magecart card-skimming attacks and other problems.
https://threatpost.com/adobe-zero-day-magento-rce-attack/178407/
Zoho’s comprehensive endpoint-management platform suffers from an authentication-bypass bug (CVE-2021-44757) that could lead to remote code execution.
https://threatpost.com/critical-manageengine-desktop-server-bug-malware/177705/