U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

Security Affairs reporting covers actively exploited Ivanti Connect Secure, Drupal Commerce Core, GitLab, and Cisco vulnerabilities; malware campaigns abusing fake AI applications; major suspected cryptocurrency thefts attributed to North Korea; breaches affecting DHS personnel; suspected cyberattacks against military logistics; and widespread publicly exposed cloud storage. The highest-priority risks are the actively exploited vulnerabilities and critical infrastructure, identity, financial, and data-exposure incidents.