CISA Adds One Known Exploited Vulnerability to Catalog

CISA announced multiple additions to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation and urged organizations to prioritize remediation per Binding Operational Directive (BOD) 22-01. The feed also includes an alert urging hardening of endpoint management systems (e.g., Microsoft Intune) following a March 2026 attack against a U.S. organization (Stryker). CISA recommends least-privilege RBAC, phishing-resistant MFA, privileged access hygiene, and other configuration controls to reduce exposure to threat actors.