CISA: Recently patched Ivanti EPM flaw now actively exploited

A batch of active security incidents and advisories: CISA warned that a recently patched high‑severity Ivanti Endpoint Manager (EPM) vulnerability is being actively exploited and ordered U.S. federal agencies to patch within three weeks. Microsoft will enable hotpatching by default for eligible Intune‑managed devices starting May 2026. Nation‑state and criminal actors are active — APT28 is using a custom Covenant variant for long‑term espionage, Microsoft Teams phishing campaigns are pushing a new A0Backdoor via social engineering/Quick Assist, and attackers are increasingly exploiting newly‑d