CISA Issues Urgent Warnings on Multiple Security Flaws and Ransomware Attacks.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws to its Known Exploited Vulnerabilities catalog, including three high-severity flaws in Veritas Backup Exec Agent software that could lead to the execution of privileged commands on the underlying system. Mandiant has revealed that an affiliate associated with the BlackCat ransomware operation is targeting publicly exposed Veritas Backup Exec installations to gain initial access by leveraging the aforementioned three bugs. Federal Civilian Executive Branch Agencies have until April 28, 2023, to apply the patches to secure their networks against potential threats.