Active Cisco FMC exploitation, a Rails file-read flaw, exposed fuel-terminal controllers, and a Russian captive-portal campaign define today’s server-risk picture—where management planes, secrets, identity, and critical infrastructure intersect.