[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frKR-UyTCDLvpuQgReifMBN7wXueTj0BtTT5FVNZA_u8":3},{"article":4,"iocs":49,"watch_terms":60,"solutions":61,"lesson":30},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"85a9a8fc-5c65-4754-ae78-fceb18ecc309","CISA orders feds to patch Windows flaw exploited as zero-day","cisa-orders-feds-to-patch-windows-flaw-exploited-as-zero-day-7ba972","The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. [...]","CISA has mandated that U.S. federal agencies patch CVE-2026-32202, a Windows zero-click vulnerability exploited in active attacks, by May 12, 2026. The flaw was discovered as an incomplete patch of CVE-2026-21510, which Russian APT28 previously exploited against Ukraine and EU countries in December 2025. Microsoft confirmed exploitation in the wild and rated it as a credential theft vector via auto-parsed LNK files.","CISA orders federal agencies to patch Windows zero-day CVE-2026-32202 exploited by APT28.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcisa-orders-feds-to-patch-windows-flaw-exploited-in-zero-day-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F02\u002F13\u002FWindows-headpic.jpg","2026-04-29T10:29:31+00:00","2026-04-29T12:00:14.372741+00:00",9,[17,20,23,25],{"name":18,"type":19},"APT28 (Fancy Bear, UAC-0001)","threat_actor",{"name":21,"type":22},"Microsoft","vendor",{"name":24,"type":22},"Akamai",{"name":26,"type":27},"Windows","product","574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":28,"icon":30,"name":31,"slug":32},null,"Zero-day","zero-day",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":45},{"id":46,"icon":30,"name":47,"slug":48},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[50,54,57],{"type":51,"value":52,"context":53},"cve","CVE-2026-32202","Zero-click Windows authentication coercion flaw exploited in active attacks",{"type":51,"value":55,"context":56},"CVE-2026-21510","Windows remote code execution flaw initially exploited by APT28 in December 2025, incompletely patched",{"type":51,"value":58,"context":59},"CVE-2026-21513","LNK file flaw exploited in APT28 attack chain alongside CVE-2026-21510",[21,24,26],{"controls":62,"vendors":134},[63,92,120],{"slug":64,"name":65,"problem":66,"products":67},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":93,"name":94,"problem":95,"products":96},"patch-management","Automated patch management","Known holes get closed in days, not months.",[97,105,112],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":106,"vendor_name":21,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":121,"name":122,"problem":123,"products":124},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[125,126],{"vendor_slug":106,"vendor_name":21,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[135,140],{"slug":136,"name":24,"logo_path":137,"roles":138},"akamai","\u002Fvendor-logos\u002Fakamai.png",[139],"reported_by",{"slug":106,"name":21,"logo_path":107,"roles":141},[142],"affected"]