Security News CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline TheHackerNews Daniel Bender 25 Apr 2026 CISA adds 4 exploited CVEs including CVSS 9.9 SimpleHelp flaw, mandating FCEB mitigation by May 8, 2026 to reduce ransomware and botnet risk.