2026-04-29: CISA adds exploited ConnectWise and Windows flaws to KEV catalog

Show Notes - 2026-04-29 Stories Covered: - Today: - CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV (CVE-2024-1708, CVE-2026-32202) (https://thehackernews.com/2026/04/cisa-adds-actively-exploited.html) - Critical GitHub Vulnerability Exposed Millions of Repositories (CVE-2026-3854) (https://thehackernews.com/2026/04/researchers-discover-critical-github.html) - LiteLLM SQL Injection Exploited Within 36 Hours (CVE-2026-42208) (https://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.html) - VECT 2.0 Ransomware Acts as Data Wiper for Large Files (https://thehackernews.com/2026/04/vect-20-ransomware-irreversibly.html) - Feuding Ransomware Groups Leak Each Other's Data (https://www.darkreading.com/threat-intelligence/feuding-ransomware-groups-leak-data) - Fresh Wave of GlassWorm VS Code Extensions Slices Through Supply Chain (https://www.darkreading.com/application-security/fresh-glassworm-vs-code-extensions-supply-chain) - Cyber Insurance Data Highlights MFA Misconfiguration as Top Loss Driver (https://www.securityweek.com/cyber-insurance-data-gives-cisos-new-ammo-for-budget-talks/) - Microsoft Outlook for iOS Still Down After Service Change (https://go.theregister.com/feed/www.theregister.com/2026/04/28/a_service_change_takes_down/) - Microsoft Teams Free Backend Change Broke Chat and Calls (https://www.bleepingcomputer.com/news/security/microsoft-says-backend-change-broke-teams-free-chat-and-calls/) - OpenAI Models Now Available on AWS Bedrock (https://go.theregister.com/feed/www.theregister.com/2026/04/28/openai_climbs_into_amazons_bedrock/) - Critical Unpatched Flaw in Hugging Face LeRobot (CVE-2026-25874) (https://thehackernews.com/2026/04/critical-cve-2026-25874-leaves-hugging.html) - Microsoft to Deprecate Legacy TLS in Exchange Online Starting July (https://www.bleepingcomputer.com/news/microsoft/microsoft-to-deprecate-legacy-tls-in-exchange-online-starting-july/) CVEs Referenced: CVE-2024-1708, CVE-2024-1709, CVE-2026-21510, CVE-2026-21513, CVE-2026-25874, CVE-2026-32202, CVE-2026-3854, CVE-2026-42208 Indicators of Compromise: IPs: 65.111.27.132 Full brief: https://carolinacleartech.com/brief/2026-04-29/

Episode metadata supplied by the publisher feed · Published Apr 29, 2026

Embed this episode

Attribution link and audio player

What this episode covers

Distinct summary based on available episode metadata or transcript content.

NOW PLAYING

2026-04-29: CISA adds exploited ConnectWise and Windows flaws to KEV catalog

0:00 17:08

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

CISO Perspectives (public) N2K Networks This season on CISO Perspectives, host Kim Jones explores some of the challenges of leading through uncertainty. We explore the complexity of the changing nature of regulation and working with the federal government, the evolution of privacy and fraud, and how emerging technologies like AI and quantum computing are changing cyber. When you don’t know what questions to ask, you’re afraid to ask, or don’t know who to ask, CISO Perspectives provides the foundation for learning in this brave new world. The Pelican Brief Bill Fleming The Pelican Brief is a show dedicated to promoting the common good on common ground through common sense hosted by Bill Fleming

Frequently Asked Questions

How long is this episode of Cyber Threat Brief?

This episode is 17 minutes long.

When was this Cyber Threat Brief episode published?

This episode was published on April 29, 2026.

Can I download this Cyber Threat Brief episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!