2026-04-29: CISA adds exploited ConnectWise and Windows flaws to KEV catalog

Show Notes - 2026-04-29

Stories Covered

• Today:
• CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV (CVE-2024-1708, CVE-2026-32202) [Critical Alerts]
• Critical GitHub Vulnerability Exposed Millions of Repositories (CVE-2026-3854) [Critical Alerts]
• LiteLLM SQL Injection Exploited Within 36 Hours (CVE-2026-42208) [Critical Alerts]
• VECT 2.0 Ransomware Acts as Data Wiper for Large Files [Ransomware & Extortion]
• Feuding Ransomware Groups Leak Each Other's Data [Ransomware & Extortion]
• Fresh Wave of GlassWorm VS Code Extensions Slices Through Supply Chain [Business & Infrastructure Threats]
• Cyber Insurance Data Highlights MFA Misconfiguration as Top Loss Driver [Business & Infrastructure Threats]
• Microsoft Outlook for iOS Still Down After Service Change [General Security News]
• Microsoft Teams Free Backend Change Broke Chat and Calls [General Security News]
• OpenAI Models Now Available on AWS Bedrock [General Security News]
• Critical Unpatched Flaw in Hugging Face LeRobot (CVE-2026-25874) [Vulnerability Disclosures]
• Microsoft to Deprecate Legacy TLS in Exchange Online Starting July [Vulnerability Disclosures]

CVEs Referenced

CVE-2024-1708, CVE-2024-1709, CVE-2026-21510, CVE-2026-21513, CVE-2026-25874, CVE-2026-32202, CVE-2026-3854, CVE-2026-42208

Indicators of Compromise

IP Addresses: 65.111.27.132

Read the full brief