CISA orders feds to patch Windows flaw exploited as zero-day
CISA orders federal agencies to patch Windows zero-day CVE-2026-32202 exploited by APT28.
CISA has mandated that U.S. federal agencies patch CVE-2026-32202, a Windows zero-click vulnerability exploited in active attacks, by May 12, 2026. The flaw was discovered as an incomplete patch of CVE-2026-21510, which Russian APT28 previously exploited against Ukraine and EU countries in December 2025. Microsoft confirmed exploitation in the wild and rated it as a credential theft vector via auto-parsed LNK files.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Microsoft?
Get an email when a new story names Microsoft, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-32202
- cve — CVE-2026-21510
- cve — CVE-2026-21513