Signal
CISA adds actively exploited vulnerabilities to KEV, including google/microsoft and TeamT5
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-02-18 06:52 UTCUpdated 2026-02-18 14:09 UTC
rss
cisakevvulnerabilityexploitation_in_the_wildadvisorypatching
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.3 top sources shown
Overview
CISA expanded its Known Exploited Vulnerabilities (KEV) catalog with additional CVEs after citing evidence of active exploitation. Coverage highlights newly added issues affecting major software ecosystems (including Google and Microsoft products) alongside exploitation of a vulnerability in TeamT5’s ThreatSonar Anti-Ransomware, underscoring that both widely deployed platforms and niche security tools can become targets once exploitation is observed.
Entities
CISAGoogleMicrosoftTeamT5Google ChromeGoogle ChromiumThreatSonar Anti-Ransomware
Score total
1.26
Momentum 24h
3
Posts
3
Origins
3
Source types
1
Duplicate ratio
0%
Why now
- CISA issued a fresh KEV update citing active exploitation
- Multiple outlets reported new KEV additions within the same day
- SecurityWeek highlighted exploitation of a TeamT5 product vulnerability
Why it matters
- KEV additions signal real-world exploitation and raise patching urgency
- Exploitation spans both mainstream platforms and security tooling
- Helps defenders prioritize remediation based on observed attacker activity
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
- CISA added multiple vulnerabilities to its KEV catalog, citing evidence of active exploitation in the wild.
- CISA added CVEs affecting Google and Microsoft products to the KEV catalog.
- CISA warned that hackers are exploiting a vulnerability affecting TeamT5’s ThreatSonar Anti-Ransomware; the issue was patched in 2024.
How sources frame it
- The Hacker News: neutral
- ComputerWeekly IT Security: neutral
- SecurityWeek: neutral
All evidence
All evidence
Flaws in Google, Microsoft products added to Cisa catalogue
ComputerWeekly IT Security · computerweekly.com · 2026-02-18 14:09 UTC
CISA: Hackers Exploiting Vulnerability in Product of Taiwan Security Firm TeamT5
SecurityWeek · securityweek.com · 2026-02-18 10:26 UTC
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
The Hacker News · thehackernews.com · 2026-02-18 06:52 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
- ComputerWeekly IT Security (1)
- SecurityWeek (1)
- The Hacker News (1)
Top origin domains (this list)
- computerweekly.com (1)
- securityweek.com (1)
- thehackernews.com (1)