CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026

CISA added five high‑severity flaws (Apple WebKit and kernel bugs, Craft CMS, and Laravel Livewire) to its Known Exploited Vulnerabilities catalog with an April 3, 2026 patch directive; several are confirmed or assessed as actively exploited. Google, vendor researchers, and multiple security firms link the Apple bugs to an iOS exploit kit called DarkSword that deploys data‑theft malware (GHOST* families), while other CVEs have been used by intrusion sets like Mimo/Hezb to install miners/proxyware and by MuddyWater (Boggy Serpens) in espionage and disruptive operations against diplomatic, energy, maritime, and finance targets.