New cyber alerts hit logistics
CISA has flagged an actively exploited Microsoft SharePoint vulnerability, while the UAE Cyber Security Council warned about destructive 'wiper' malware — combined alerts that raise urgency for tenant and vendor patching, backups, and incident planning. Logistics operators and building vendors should treat these as immediate operational risks. (cybersecuritynews.com) (gulfnews.com)
CISA added CVE‑2026‑20963 (a SharePoint deserialization RCE) to its Known Exploited Vulnerabilities catalog on March 18, 2026 and set a remediation due date of March 21, 2026 for federal agencies under BOD 22‑01. (cybersecuritynews.com) (nvd.nist.gov) Microsoft published a security update for SharePoint on January 13, 2026 that fixed the flaw, and security agencies observed active exploitation roughly 64 days after that patch’s publication. (support.microsoft.com) (cybersecuritynews.com) The National Vulnerability Database lists CVE‑2026‑20963 as affecting SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016, with a vendor‑reported CVSS 3.x base score of 8.8. (nvd.nist.gov) Industry case studies and Microsoft product documentation show SharePoint is widely used for intranets, vendor portals and facilities-management workflows that host lease agreements, maintenance tickets and vendor invoices for logistics firms. (microsoft.com) (scnsoft.com) The UAE Cyber Security Council issued a public advisory in mid‑March 2026 warning that destructive “wiper” malware can permanently erase data and disrupt operations, and urged organisations to apply updates, avoid suspicious links and maintain secure backups. (wam.ae) (gulfnews.com) Multiple security vendors and government bodies recommend immutable or air‑gapped backups and regularly tested recovery drills as the primary resilience measures against wiper campaigns that also target backup repositories, guidance echoed in recent Unit42 and FINRA advisories. (unit42.paloaltonetworks.com) (finra.org)
