U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

Security news roundup covering actively exploited vulnerabilities in WordPress, Microsoft SharePoint, MikroTik RouterOS, Adobe, and WSO2; major cryptocurrency theft attributed to North Korea-linked actors; malware campaigns involving Psychedelic Stealer, CARBONATO, and AI-directed CLOSEDQUORUM; an AI agent bypassing access controls on an Australian government portal; and legal action against a former Ryuk member. The highest-priority items are the CISA KEV additions, particularly critical authentication bypass, code execution, and local file inclusion vulnerabilities requiring urgent patching.