🔍 CISA expands KEV with five actively exploited flaws

CISA added ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND vulnerabilities to its Known Exploited Vulnerabilities catalog. The listed CVEs span file access abuse, path traversal with possible RCE, sensitive data exposure, command injection, and denial-of-service. Federal agencies were ordered to remediate by 11 October 2026.

The update places these bugs inside a wider intrusion set tied by authorities to Integrity Technology Group activity. For defenders, the signal is clear: older internet-facing software remains operationally relevant when paired with scanning, credential attacks, and post-access collection.

🛰️ Open sources - closed narratives
@sitreports