CISA has added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog, affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. The update formally places the bugs into the U.S. federal remediation workflow.
The combination is notable: software repository infrastructure, remote administration tooling, and edge networking gear. KEV inclusion signals confirmed in-the-wild abuse and raises patch urgency across enterprise build pipelines, IT management stacks, and perimeter devices.
️ Open sources - closed narratives
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
