CISA Adds One Known Exploited Vulnerability to Catalog

CISA published multiple KEV Catalog additions (active exploitation) and an advisory on software supply-chain intrusions. New KEV entries cover diverse products including SolarWinds Serv-U, Mirasvit Full Page Cache Warmer, Linux kernel, Android framework, Oracle WebLogic, Palo Alto PAN-OS, Nx Console (malicious VS Code extension), Daemon Tools Lite, TanStack, and LiteSpeed cPanel plugin. CISA also warns of developer-ecosystem supply-chain compromises (malicious Nx Console extension that led to a GitHub compromise and the “Megalodon” campaign injecting malicious GitHub Actions to harvest CI/CD/云