Actively Exploited Software Vulnerabilities Demand Patching, CISA Warns

**Executive summary:** A federal cyber defense agency added five high‑risk, actively exploited vulnerabilities to its active threat list affecting Apache Struts, Strapi, ONLYOFFICE, ProFTPD, and ISC BIND; the report details exploitation mechanisms (RCE, directory traversal, arbitrary file access, DoS), affected versions, and urgent patching actions and warns that unpatched systems are at immediate risk of full compromise, data theft, and ransomware.