CISA Alerts on Microsoft Windows Shell Zero-Day Under Active Exploitation

CISA has issued an urgent alert for an actively exploited Windows Shell zero-day (CVE-2026-32202) that allows attackers to bypass protections and perform network spoofing; the flaw is listed in CISA's KEV catalog with a mandated remediation deadline for federal agencies and organizations are urged to apply patches and increase monitoring for spoofing and anomalous network activity.