U.S. CISA adds Apple, Rockwell, and Hikvision  flaws to its Known Exploited Vulnerabilities catalog

CISA added five high-severity vulnerabilities (including multiple Apple WebKit/iOS issues, a Hikvision improper-authentication flaw, and a Rockwell controller authentication bypass) to its Known Exploited Vulnerabilities catalog; Google’s Threat Intelligence Group linked two Apple issues to the Coruna iOS exploit kit observed in targeted and broader campaigns by surveillance-related actors and UNC groups. Agencies are mandated to patch by March 26, 2026, and organizations are urged to remediate affected systems.