cisa alert

  1. CISA Adds CVE-2009-0238 and CVE-2026-32201 to KEV: Patch Exploited Office & SharePoint

    CISA’s latest update to the Known Exploited Vulnerabilities Catalog is a reminder that age is no defense when attackers find a reliable path into widely deployed software. On April 14, 2026, the agency added CVE-2009-0238, a Microsoft Office remote code execution vulnerability, and...
  2. CISA Warns Intune Hardening After Stryker March 2026 Disruption

    Stryker’s March 2026 network disruption has quickly become more than a vendor incident: it is now a warning shot about how endpoint management systems can be turned into high-value attack paths when administrative controls are too broad, too trusted, or too easy to abuse. On March 18, 2026, CISA...