Since the original alert, Microsoft has confirmed it is urgently developing a patch for a zero-day vulnerability (a previously unknown security flaw) in Windows Defender called RoguePlanet. The company is scrambling to address this new threat alongside what is being called a record-breaking Patch Tuesday (Microsoft's monthly security update release), indicating the scope of active cyber threats has expanded beyond the initially reported vulnerabilities in Adobe, Joomla, and other software.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned organizations about several critical software vulnerabilities that attackers are actively exploiting. These flaws affect widely-used platforms, and CISA has added them to its list of known exploited vulnerabilities (KEV).
Adobe ColdFusion faces a critical vulnerability that hackers are already using to attack systems. ColdFusion is business software that many companies rely on to build and run websites and applications. The flaw is serious enough that CISA listed it among the most dangerous vulnerabilities currently under attack.
The agency also identified critical flaws in Joomla, a popular website-building platform used by millions of websites worldwide. Like ColdFusion, these Joomla vulnerabilities are being actively exploited by attackers, meaning cybercriminals have already figured out how to break into systems using these security gaps.
Langflow, a newer software tool used for building applications with artificial intelligence features, also contains a critical vulnerability that is being actively exploited. This flaw exposes systems to potential attacks, putting organizations using Langflow at immediate risk.
Additionally, GitHub's agentic workflows—automated processes that help developers work more efficiently—face a prompt injection vulnerability. This type of flaw allows attackers to trick AI systems into performing unwanted actions by inserting malicious instructions into seemingly normal requests.
CISA's decision to add these vulnerabilities to the KEV list signals high urgency. The agency is urging all organizations using these software products to apply security patches immediately. Patches are software updates that fix security holes before attackers can exploit them further.
Organizations using Adobe ColdFusion, Joomla, Langflow, or GitHub workflows should prioritize applying the latest security updates. Waiting to patch these vulnerabilities puts systems at serious risk of being hacked, potentially leading to stolen data, disrupted services, or financial losses.
The inclusion of multiple vulnerabilities on CISA's list at once demonstrates the current threat landscape facing businesses and organizations. Cybersecurity experts recommend that companies maintain updated software, train employees to recognize suspicious activity, and follow security best practices to protect against these and future attacks.