CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation, and reminds Federal Civilian Executive Branch agencies of Binding Operational Directive 26-04 which mandates prioritizing rapid remediation of KEV-listed flaws on publicly exposed assets; CISA also encourages all organizations to adopt similar risk-based vulnerability management and provides a nomination process for potential KEV additions.