U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog

Feed of mid-July 2026 security headlines: CISA added multiple vulnerabilities (including a KNX protocol issue and Oracle-related flaws) to its Known Exploited Vulnerabilities catalog; SonicWall reported active exploitation of two SMA 1000 zero-days; Zoom patched a critical account-takeover bug (CVE-2026-53412, CVSS 9.8); Microsoft/SonicWall flaws were added to CISA KEV. Other notable items: an AsyncAPI npm supply‑chain compromise that injected malware into widely downloaded packages; a new Windows Privilege Escalation PoC “LegacyHive” affecting fully patched systems; Palo Alto Unit 42’s TuxBot