This is your week if you run a management API that is reachable from the internet. The Hacker News reported a CVSS 10.0 flaw in LXD and MicroCloud that lets an attacker authenticate as a trusted client with no private key. Unit 42 flagged critical PHP vulnerabilities, and CISA listed an Ivanti Connect Secure flaw as exploited in the wild. Patching is step one. Rotating trust certificates and getting those endpoints off the open network is the rest.
Reply and we'll scope the audit.