2026-04-14: CISA added 7 actively exploited vulnerabilities to the KEV catalog

Show Notes - 2026-04-14

Stories Covered

• Today:
• Adobe Acrobat/Reader Zero-Day (CVE-2026-34621) [Critical Alerts]
• Cisco FMC Zero-Day Exploited by Interlock Ransomware (CVE-2026-20131) [Critical Alerts]
• CISA KEV Additions (7 vulnerabilities, April 27 deadline) [Critical Alerts]
• Silent Ransom Group Targeting Law Firms [Ransomware & Extortion]
• Medusa Ransomware via Exchange Vulnerabilities [Ransomware & Extortion]
• Rockstar Games Data Breach via Anodot/Snowflake [Business & Infrastructure Threats]
• wolfSSL Certificate Verification Flaw (CVE-2026-5194) [Business & Infrastructure Threats]
• OpenAI Certificate Rotation After Axios Supply Chain Attack [Business & Infrastructure Threats]
• Storm Infostealer: Server-Side Decryption Model [Business & Infrastructure Threats]
• Linux Foundation Social Engineering via Fake Slack Account [Business & Infrastructure Threats]
• Anthropic's Claude Mythos: AI-Powered Vulnerability Discovery [General Security News]
• JanelaRAT Malware Targets Latin American Banks [General Security News]
• ShowDoc RCE Flaw (CVE-2025-0520) Actively Exploited [General Security News]
• EncystPHP Webshell Scans Targeting FreePBX [General Security News]
• March 2026 CVE Landscape: 31 High-Impact Vulnerabilities [Vulnerability Disclosures]
• Fortinet FortiClient EMS SQL Injection (CVE-2026-21643) [Vulnerability Disclosures]

CVEs Referenced

CVE-2012-1854, CVE-2017-7921, CVE-2020-9715, CVE-2023-21529, CVE-2023-36424, CVE-2025-0520, CVE-2025-60710, CVE-2026-20131, CVE-2026-21643, CVE-2026-27483, CVE-2026-27944, CVE-2026-34621, CVE-2026-5194

Indicators of Compromise

Domains: sites[.]google

IP Addresses: 2.26.97.61, 160.119.76.250, 45.95.147.178

Read the full brief