Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software

A broad set of security incidents and disclosures were reported, ranging from active-exploitation vulnerabilities added to CISA's KEV list to multiple high‑severity product and supply‑chain compromises. Notable items include CISA adding CVE-2024-57726 to KEV (evidence of active exploitation), rapid in‑the‑wild exploitation of LMDeploy CVE-2026-33626, a critical Cohere Terrarium sandbox escape (CVE-2026-5752), a high‑impact ASP.NET Core privilege escalation (CVE-2026-40372), and an Apple notification retention fix (CVE-2026-28950). The week also saw numerous supply‑chain and malware incidents —