CISA Adds Four Actively Exploited Vulnerabilities to Federal Catalog

CISA said it added four vulnerabilities to its catalog of flaws it has evidence are being actively exploited [1]. The agency noted that a binding operational directive, BOD 26-04, sets vulnerability management rules for Federal Civilian Executive Branch agencies and directs them to move quickly on high-risk flaws tracked by CVE identifiers [1]. Separately the same day, CISA, the NSA and the FBI issued a joint advisory saying China-based AI firms have targeted U.S. AI companies to extract proprietary models through knowledge distillation [2].

Sources

1. cisa.gov · CISA Adds Four Known Exploited Vulnerabilities to Catalog Sep 8, 2026
2. cisa.gov · CISA, NSA and FBI Warn of China-Based AI Companies Targeting US AI Models with Industrial-Scale Knowledge Distillation Campaigns to Shortcut AI Development Sep 8, 2026

This is the neutral brief the press writes once, for everyone, before each reader’s paper adds its own so-what. It links out; it does not republish. 2 articles clustered.

Print your own paper