CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

CISA added two vulnerabilities—CVE-2024-1708 (ConnectWise ScreenConnect, CVSS 8.4) and CVE-2026-32202 (Microsoft Windows Shell, CVSS 4.3)—to its Known Exploited Vulnerabilities list after evidence of active exploitation. The advisory notes these flaws have been chained with other critical bugs (notably CVE-2024-1709) and links attacks to APT28 and a China-based actor tracked as Storm-1175, which has deployed Medusa ransomware; federal agencies are required to patch by May 12, 2026.