BleepingComputer reports that federal agencies have been urged by the Cybersecurity and Infrastructure Security Agency to address five actively exploited security vulnerabilities, three of which impact Veritas Backup Exec instances and have been leveraged by the ALPHV/BlackCat ransomware operation, by April 28. Aside from including the Veritas Backup Exec flaws, tracked as CVE-2021-27877, CVE-2021-27876, and CVE-2021-27878, CISA has also added a zero-day impacting Arm’s Mali GPU to target Samsung’s web browser, tracked as CVE-2023-26083, and another bug affecting Microsoft Windows Certificate Dialog, tracked as CVE-2019-1388, to its Known Exploited Vulnerabilities catalog.

Read full article on SC Magazine