U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalog

CISA added several high-severity vulnerabilities—affecting Apple products, Craft CMS, and Laravel Livewire—to its Known Exploited Vulnerabilities catalog after reports of active exploitation: an iOS exploit kit called DarkSword targeting Apple flaws, Craft CMS RCE and chained framework issues used to breach servers and deploy a PHP webshell, and CVE-2025-54068 linked to MuddyWater operations; agencies are ordered to remediate by April 3, 2026.