Newly cataloged vulnerabilities are being used to plant reverse shells and crypto miners.
The Hacker News reports that CISA has added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. Attackers are using them to plant reverse shells and crypto miners and to harvest credentials, including from AI infrastructure platforms.
Why it matters: the KEV catalog is a practical patch-priority list, these are flaws being used right now. Cross-check your estate against it, patch the exploited ones first, and treat AI infrastructure as a growing target in its own right.