Overview

Cybersecurity and Infrastructure Security Agency (CISA) on Friday added five security flaws impacting Apple, Craft CMS, and Laravel Livewire to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch them by April 3, 2026. The vulnerabilities that have come under exploitation are listed below - CVE-2025-31277 (CVSS score: 8.8) - A vulnerability in Apple

Vulnerability Details

Organisations Involved

The following organisations are mentioned in relation to this incident: AWS, Apple, CISA, Flags Apple, Infrastructure Security Agency, Known Exploited Vulnerabilities.


Sources: thehackernews. Aggregated by Cybernews Agency pipeline.