2026-04-22: CISA added four Cisco SD-WAN flaws to its KEV catalog with a Friday patch deadline

Show Notes - 2026-04-22

Stories Covered

• Today:
• CISA Flags Four Cisco SD-WAN Vulnerabilities as Actively Exploited (CVE-2026-20133, CVE-2026-20128, CVE-2026-20122, CVE-2026-20127) [Critical Alerts]
• Apache ActiveMQ Code Injection Flaw Impacts 6,400 Servers (CVE-2026-34197) [Critical Alerts]
• Microsoft SharePoint Zero-Day Under Active Attack (CVE-2026-32201) [Critical Alerts]
• Microsoft ASP.NET Core Emergency Patches for Critical Privilege Escalation (CVE-2026-40372) [Critical Alerts]
• SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation [Ransomware & Extortion]
• Three Former Ransomware Negotiators Plead Guilty to BlackCat Attacks [Ransomware & Extortion]
• Former FBI Official Urges Terrorism Designations, Homicide Charges for Hospital Ransomware Attacks [Ransomware & Extortion]
• Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk (CVE-2026-1731) [Business & Infrastructure Threats]
• Scattered Spider Member 'Tylerb' Pleads Guilty [Business & Infrastructure Threats]
• Cisco Phishing and MFA Exploitation Trends (2025) [Business & Infrastructure Threats]
• Microsoft: Detection Strategies Against Infiltrating IT Workers (Jasper Sleet) [Windows / AD Security]
• Windows Defender Exploits Turn Built-in Security into Attacker Tool [Windows / AD Security]
• Vercel Breach Linked to Employee Account at Context.ai [General Security News]
• France's ID Agency (ANTS) Breached [General Security News]
• Mustang Panda's New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles [General Security News]
• Siemens Industrial Control Systems (Multiple Advisories) [Vulnerability Disclosures]
• Hardy Barth Salia EV Charge Controller (CVE-2025-5873, CVE-2025-10371) [Vulnerability Disclosures]
• Zero Motorcycles Bluetooth Pairing Vulnerability (CVE-2026-1354) [Vulnerability Disclosures]
• Cohere AI Terrarium Sandbox Escape (CVE-2026-5752) [Vulnerability Disclosures]
• Progress MOVEit WAF, LoadMaster Vulnerabilities [Vulnerability Disclosures]
• Google Antigravity Remote Code Execution [Vulnerability Disclosures]

CVEs Referenced

CVE-2016-3088, CVE-2023-46604, CVE-2025-10371, CVE-2025-5873, CVE-2026-1354, CVE-2026-1731, CVE-2026-20122, CVE-2026-20127, CVE-2026-20128, CVE-2026-20133, CVE-2026-32201, CVE-2026-34197, CVE-2026-40372, CVE-2026-5752

Read the full brief