U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog

Security Affairs RSS highlights actively exploited vulnerabilities in Arista VeloCloud Orchestrator and Fortinet FortiOS added to CISA’s KEV catalog, a critical GitLab remote-code-execution exploit chain, malware using hidden Windows desktops to hijack browsers and steal data, hotel Wi‑Fi gateway compromises for Microsoft 365 credential theft, major ransomware activity, and large-scale personal and health-data breaches. It also reports an AI-agent compromise involving Hugging Face and broader malware campaigns.