BLUF
The Cybersecurity and Infrastructure Security Agency (CISA) added exploited vulnerabilities in a remote access tool and Windows Shell to its catalogue, confirming active attacker use for remote code execution in global cyber campaigns.Learning Outcomes:
- Understand the significance of inclusion in CISA’s Known Exploited Vulnerabilities (KEV) catalogue as an indicator of active real-world exploitation.
- Assess how remote-access and system-shell vulnerabilities enable privilege escalation, code execution, and identity impersonation.
