U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

Security Affairs reports active exploitation of multiple critical vulnerabilities, including Cisco Secure Email Gateway CVE-2026-76519 (CVSS 9.8), a Microsoft Windows Shell flaw CVE-2026-96951, Palo Alto PAN-OS and Ahsay AhsayCBS issues added to CISA’s KEV catalog, and three Ivanti Connect Secure zero-days used to obtain root access and steal credentials. Additional reporting covers espionage by the Kazakhstan-linked Silent Lynx group, ad-delivered spyware, the Hirudo Android banking trojan, XWorm surveillance capabilities, and a record Microsoft October 2026 patch release.