<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[🔴 Defender zero-day added to KEV.]]></title><description><![CDATA[<p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f534.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--red_circle" style="height:23px;width:auto;vertical-align:middle" title="🔴" alt="🔴" /> Defender zero-day added to KEV. <img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f534.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--red_circle" style="height:23px;width:auto;vertical-align:middle" title="🔴" alt="🔴" /> FortiClient EMS SQLi is now in KEV with active exploitation. 🟡 Bitwarden CLI npm hijack may have exposed GitHub, npm, and cloud secrets. Patch immediately, review exposed EMS, and rotate creds if @bitwarden/cli 2026.4.0 was used. solomonneas.dev/intel</p><p><a href="https://infosec.exchange/tags/CyberSecurity" rel="tag">#<span>CyberSecurity</span></a> <a href="https://infosec.exchange/tags/VulnerabilityManagement" rel="tag">#<span>VulnerabilityManagement</span></a> <a href="https://infosec.exchange/tags/ThreatIntel" rel="tag">#<span>ThreatIntel</span></a> <a href="https://infosec.exchange/tags/AppSec" rel="tag">#<span>AppSec</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/d503a08a-595b-48c3-a36b-afb47c7d9b97/defender-zero-day-added-to-kev.</link><generator>RSS for Node</generator><lastBuildDate>Fri, 15 May 2026 01:53:25 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/d503a08a-595b-48c3-a36b-afb47c7d9b97.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 27 Apr 2026 12:02:58 GMT</pubDate><ttl>60</ttl></channel></rss>