That April Windows update you skipped? Hackers are exploiting it now

PCWorld reports that CISA has flagged four actively exploited security vulnerabilities affecting Windows, VMware vCenter, Microsoft SharePoint, and Apple macOS systems. Critical flaws carry severity scores as high as 9.8 out of 10, with attackers using them to deploy ransomware, install Monero mining malware, and bypass authentication entirely. Users and administrators are urged to apply available patches immediately, including recent Windows, SharePoint, VMware, and macOS updates, to avoid becoming targets. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about four security vulnerabilities that are being exploited by attackers in the wild. CISA has added the vulnerabilities to its catalog of Known Exploited Vulnerabilities (KEV) . Microsoft Windows and SharePoint, VMware vCenter, and Apple macOS are affected. Inclusion in the KEV catalog sends an important signal: CISA doesn't simply list every known vulnerability out there, but only those for which there is concrete evidence of active exploitation by attackers. The agency points out that such vulnerabilities are among the most commonly used attack vectors and pose a significant risk.