U.S. CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog

Feed covers multiple high-impact security events: CISA added Microsoft Windows Shell and ConnectWise ScreenConnect vulnerabilities (including CVE-2024-02-21 path traversal) to its Known Exploited Vulnerabilities catalog. A critical GitHub remote code execution flaw (CVE-2026-3854) was disclosed that can be exploited with a single git push. Threat actors (ShinyHunters) exploited an Anodot breach to access Vimeo metadata and reportedly claimed a separate Medtronic incident affecting millions of records. Microsoft patched a Microsoft Entra ID privilege-escalation weakness involving the Agent ID •