CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

CISA added four actively exploited vulnerabilities to its KEV catalog—CVE-2024-57726 and CVE-2024-57728 in SimpleHelp (privilege escalation and zip-slip), CVE-2024-7399 in Samsung MagicINFO 9 (path traversal), and CVE-2025-29635 in D-Link DIR-823X (command injection). The SimpleHelp flaws have been observed as precursors to ransomware (including a DragonForce-linked campaign), and the Samsung and D-Link issues have been tied to Mirai botnet activity; affected Federal agencies are advised to apply fixes or discontinue affected devices by May 8, 2026.