CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA reports active exploitation of multiple vulnerabilities newly added to the Known Exploited Vulnerabilities (KEV) Catalog, including flaws in IBM Langflow, N-able N-central, Apache Tomcat, Cisco Secure Firewall Management Center, Fortinet FortiOS, Arista VeloCloud Orchestrator, Check Point SmartConsole, Microsoft SharePoint, DD-WRT, and WordPress. CISA urges rapid, risk-based remediation and compromise assessment, and separately warns water and wastewater organizations that threat actors are targeting internet-exposed PLCs by changing passwords and network settings, causing operational and