Ransomware Hits UK Retail Giants, CISA Flags New KEV Entries, and a Critical Fortinet Auth Bypass Gets Patched

News

CISA Adds New Vulnerabilities to KEV Catalog Including Actively Exploited Bugs

CISA continues to update the KEV list with newly confirmed in-the-wild exploitation, giving defenders a prioritized patching queue that should sit at the top of every vuln management workflow. If you are not automatically ingesting this feed, you are leaving signal on the table.

Analysis

Researchers Disclose Critical Vulnerabilities in Widely Used NGINX Ingress Controller

Multiple critical flaws in the NGINX Ingress Controller for Kubernetes allow attackers to steal cluster secrets and escalate privileges, affecting a massive chunk of production Kubernetes deployments. If you run Kubernetes at any scale, this needs to move to the top of your patching list today.

Tools

ProjectDiscovery Ships New Nuclei Templates Covering Recent Critical CVEs

Fresh templates for recently disclosed critical vulnerabilities are now available, letting security teams quickly validate exposure at scale across their attack surface. If you run continuous scanning, pulling the latest template release should be part of your daily automation pipeline.