Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software

A large set of active and impactful threats and vulnerabilities were reported: researchers uncovered a previously undocumented pre‑Stuxnet Lua sabotage framework dubbed “fast16” targeting engineering/precision‑calculation software; CISA added four actively exploited flaws (including CVE-2024-57726) to its KEV list with a May 2026 federal remediation deadline; a persistent FIRESTARTER backdoor compromised a federal Cisco Firepower device and survived patches. Multiple supply‑chain incidents were disclosed (Bitwarden CLI/Checkmarx campaign, malicious Checkmarx KICS Docker images and VS Code/ npm