CISA Adds Six New Actively Exploited Vulnerabilities to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on August 26, 2024, indicating active exploitation in the wild. The flaws affect products from Microsoft, Linux, Red Hat, and Citrix, though specific CVE IDs were not disclosed in the notice. The inclusion in the KEV catalog signals that federal agencies and organizations are advised to prioritize remediation due to confirmed malicious activity. No further technical details or impact descriptions were provided beyond the vendors and exploitation status. The update reflects ongoing threats targeting enterprise and government systems.