CISA’s addition of CVE-2026-1731 to the Known Exploited Vulnerabilities (KEV) Catalog puts a high‑priority, pre‑authentication OS command‑injection flaw in BeyondTrust Remote Support (RS) and certain Privileged Remote Access (PRA) versions squarely in the crosshairs of federal and enterprise...
Attackers have weaponized a recently patched Windows Server Update Services (WSUS) remote code execution bug (CVE‑2025‑59287) to gain SYSTEM-level access to WSUS hosts and deliver the ShadowPad backdoor, using native Windows tools and simple staging techniques that make detection and containment...