CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six previously exploited vulnerabilities to its KEV catalog, including flaws in Citrix NetScaler, Linux, and Microsoft SQL Server. These vulnerabilities are actively being exploited, with telemetry showing attacks originating from various countries, including Switzerland, Germany, and Russia. CISA is urging federal agencies to patch these vulnerabilities by specified deadlines, emphasizing the need to address underlying software weaknesses and the increasing use of AI in automated exploitation.