CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA's addition of three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog confirms that threat actors are actively targeting flaws in ownCloud, the Linux Kernel, and JFrog Artifactory — all of which are widely deployed in enterprise and government environments. The core failure here is the gap between vulnerability disclosure and remediation, allowing attackers to exploit known weaknesses before organizations apply patches. Publicly exposed assets are especially dangerous when unpatched, as they provide an accessible attack surface to opportunistic and targeted adversaries alike. CISA's Binding Operational Directive (BOD) 26-04 underscores that timely patching of high-risk vulnerabilities is not optional for federal agencies, and the same urgency should be adopted across the private sector.