CISA Adds Five Vulnerabilities to Known Exploited List, Including Microsoft and Cisco Flaws; Google Reports 44 Android Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five vulnerabilities to its Known Exploited Vulnerabilities catalog, which includes critical zero-day vulnerabilities affecting the Microsoft Partner Center website and Synacor's Zimbra Collaboration Suite. The vulnerabilities also impact software from Cisco and Progress WhatsUp Gold. Additionally, Google's March 2025 Android Security Bulletin has identified 44 vulnerabilities in Android, including two that are actively exploited: CVE-2024-43093 and CVE-2024-50302, with one linked to a zero-day attack targeting activists. These updates highlight ongoing cybersecurity threats and the importance of timely software updates to mitigate risks.