CISA Warns of Windows Shell Zero-Day Exploited in Attacks

**CISA Alert:** CISA added Microsoft Windows Shell zero-day CVE-2026-32202 to its Known Exploited Vulnerabilities catalog after confirming in-the-wild exploitation; the flaw is a protection mechanism failure (CWE-693) that enables network spoofing and can facilitate lateral movement and privilege escalation. Federal agencies must remediate by May 12, 2026, and organizations are urged to apply Microsoft mitigations, discontinue affected products if necessary, and monitor for spoofing indicators.