U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

Security Affairs reports widespread active exploitation and major cyber threats, including CISA KEV additions affecting Palo Alto PAN-OS, Ahsay AhsayCBS, Cisco Secure Email Gateway, and Microsoft Windows Shell. Cisco Secure Email Gateway flaw CVE-2026-76519 is critical (CVSS 9.8) and reportedly allows root access. Additional coverage includes Ivanti Connect Secure zero-day exploitation, Android banking trojan Hirudo, XWorm RAT evolution, spyware delivered through advertising infrastructure, and espionage activity by the Silent Lynx threat actor.