The US Cybersecurity and Infrastructure Agency (CISA) has added two new flaws to its Known Exploited Vulnerabilities catalog – a Microsoft Windows flaw and an Adobe ColdFusion vulnerability. Federal agencies have been instructed to immediately apply patches to these flaws or stop using the software entirely due to the significant security risks they pose.

LockBit ransomware group falls victim to hackers itself
A data leak has disclosed information about negotiations with victims, Bitcoin wallet addresses, affiliate accounts, and details of attacks.