Active Zero-Day Exploits Surge

Multiple zero-days under active exploitation: BitLocker bypass, Check Point VPN (CVE-2026-50751) exploited by Qilin, Fortinet CVE-2026-35616 (FortiClient), Fortinet CVE-2025-68686 (FortiOS SSL-VPN patch-bypass, CISA KEV, remediation deadline Aug 10), and now a Cisco firewall zero-day (unauthenticated DoS via SSL VPN, CISA mandates patch by Aug 14). Defenders must prioritize patching.