CISA’s Hall of Shame: New Tech Flaws Join the Vulnerability Catalog Roster
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added ASUS RT-AX55 devices, Craft CMS, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog. Apparently, these vulnerabilities are throwing a party and everyone is invited—especially if you’re a hacker looking for a backdoor.
Hot Take:
It seems like ASUS, Craft CMS, and ConnectWise ScreenConnect are practicing their vulnerability dance moves on the cybersecurity stage. Meanwhile, CISA is adding these exploits to its catalog like a bouncer with a clipboard, preventing uninvited intruders from crashing the security party. Time to suit up or shut down!
Key Points:
- CISA adds vulnerabilities in ASUS, Craft CMS, and ConnectWise ScreenConnect to Known Exploited Vulnerabilities (KEV) catalog.
- ASUS routers hit by improper authentication and OS command injection vulnerabilities.
- Craft CMS suffers from code injection and external control vulnerabilities.
- ConnectWise ScreenConnect grapples with improper authentication issues, possibly linked to a nation-state attack.
- Federal agencies mandated to address these vulnerabilities by June 23, 2025.
Already a member? Log in here