U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog

Security Affairs RSS aggregation covering actively exploited vulnerabilities, major vendor patches, zero-day attacks against Ivanti VPN appliances, critical GitLab flaws, malware developments, cybercrime arrests, and operational technology attacks affecting supermarket refrigeration systems. The most urgent items are CISA KEV additions for Microsoft Windows Shell and Ivanti Connect Secure, the Ivanti zero-day exploitation campaign, and GitLab CVE-2026-97229, reportedly enabling unauthenticated remote code execution with a CVSS score of 10.0.