CISA Adds One Known Exploited Vulnerability to Catalog

CISA reports active exploitation of multiple vulnerabilities added to the Known Exploited Vulnerabilities (KEV) Catalog, including code injection, heap inspection, use-after-free, SQL injection, command injection, unsafe deserialization, authentication bypass, and sensitive-data encryption weaknesses affecting Ray, Cisco ASA/FTD, Microsoft Windows, Metabase, Progress LoadMaster, JetBrains TeamCity, IBM Langflow, N-able N-central, and Apache Tomcat. CISA also warns that threat actors are targeting internet-exposed programmable logic controllers in the Water and Wastewater Systems sector, with a