2026-03-27: CISA adds actively exploited Langflow and Trivy vulnerabilities to KEV catalog with April deadlines

Show Notes - 2026-03-27

Stories Covered

• Today: [March 27, 2026]
• Langflow AI Framework Actively Exploited (CVE-2026-33017) [Critical Alerts]
• Trivy Supply Chain Compromise (CVE-2026-33634) [Critical Alerts]
• TeamPCP Supply Chain Campaign Update: All 91 Checkmarx GitHub Action Tags Compromised [Critical Alerts]
• PTC Windchill Critical RCE Vulnerability (CVE-2026-4681) [Vulnerability Disclosures]
• Coruna iOS Exploit Framework Linked to Operation Triangulation [Vulnerability Disclosures]
• WAGO Industrial Switches CLI Escape Vulnerability (CVE-2026-3587) [Vulnerability Disclosures]
• OpenCode Systems SMS Gateway Access Control Flaw (CVE-2025-70614) [Vulnerability Disclosures]
• Cisco IOS Software Multiple Vulnerabilities [Vulnerability Disclosures]
• Windows 11 KB5079391 Smart App Control Improvements [Windows / AD Security]
• TikTok for Business Phishing Campaign [Business & Infrastructure Threats]
• Dutch National Police Phishing Attack [Business & Infrastructure Threats]
• Ajax Football Club System Breach [Business & Infrastructure Threats]
• UK Sanctions Xinbi Marketplace and Scam Centers [Ransomware & Extortion]
• Russia Arrests Suspected LeakBase Forum Owner [Ransomware & Extortion]
• RedLine Infostealer Admin Extradited to US [Ransomware & Extortion]
• Linux Kernel AI Bug Reports Shift from Junk to Legitimate Overnight [General Security News]
• Unit 42 Uncovers Converging China-Aligned Espionage Campaigns [General Security News]

CVEs Referenced

CVE-2023-32434, CVE-2023-38606, CVE-2025-3248, CVE-2025-70614, CVE-2026-33017, CVE-2026-33634, CVE-2026-3587, CVE-2026-4681

Indicators of Compromise

Domains: careerscrews[.]com, careersstaffgrid[.]com., careerstaffer[.]com, careersworkflow[.]com, careerstransform[.]com, careersupskill[.]com, careerssuccess[.]com, careersstaffgrid[.]com, careersprogress[.]com, careersgrower[.]com, careersengage[.]com

IP Addresses: 13.1.3.0, 13.0.3.0

Read the full brief