That April Windows update you skipped? Hackers are exploiting it now

The useful part

Agency (CISA) has issued a warning about four security vulnerabilities that are being exploited by attackers in the wild. CISA has added the vulnerabilities to its catalog of Known Exploited Vulnerabilities (KEV). Microsoft Windows and SharePoint, VMware vCenter, and Apple macOS are affected.

How it works

• Inclusion in the KEV catalog sends an important signal: CISA doesn't simply list every known vulnerability out there, but only those for which there is concrete evidence of active exploitation by attackers.
• For home users, this means that if a security update is available for their device, it should be installed as soon as possible.
• The agency points out that such vulnerabilities are among the most commonly used attack vectors and pose a significant risk.
• Organizations and system administrators should also check whether affected systems are accessible via the internet and whether there are any indications that an attack has already taken place on vulnerable...
• Critical vulnerability enables code execution The first vulnerability is designated CVE-2026-33824 and affects the Internet Key Exchange (IKE) service extensions in...