Attackers Aren't Breaking In Anymore — They're Logging In: CISA's Latest Alert Reveals a Pattern
CISA just added four vulnerabilities to its Known Exploited Vulnerabilities catalog — meaning attackers are actively using them right now, not theoretically someday. Look past the alphabet soup of CVE numbers and a pattern jumps out: most of these flaws don't involve smashing through defenses at all. They involve slipping past the systems that decide who gets trusted in the first place.
Bottom Line
Four actively exploited flaws across Microsoft, Broadcom/VMware, and Apple would be notable on volume alone, but the real story is the method: attackers are increasingly picking the locks of authentication and trust rather than breaking windows. That shift makes intrusions quieter, detection harder, and patching more urgent — because by the time a flaw lands on the KEV list, someone is already using it.