CISA Adds One Known Exploited Vulnerability to Catalog

CISA reports active exploitation of multiple vulnerabilities added to the Known Exploited Vulnerabilities Catalog, including authentication bypass, hard-coded credentials, sensitive information exposure, command injection, deserialization, SQL injection, buffer overflow, and improper authentication flaws affecting enterprise, security, networking, collaboration, and web platforms. CISA also warns that threat actors are targeting internet-exposed programmable logic controllers in the water and wastewater sector, modifying passwords and IP addresses to lock out operators and disrupt operations.