CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

The feed highlights an active and evolving cyber threat landscape, including multiple vulnerabilities under active exploitation, remote code execution and authentication bypass flaws, phishing-as-a-service campaigns targeting Microsoft 365 and Apple users, state-sponsored espionage, malware delivery infrastructure, and supply-chain abuse. The most urgent items are CISA KEV additions, including critical Oracle WebLogic and Gitea RCEs, as well as unpatched Kaltura flaws enabling unauthenticated file read and code execution.