Security News CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active Exploitation TheHackerNews Daniel Bender Apr 8, 2025 CrushFTP flaw CVE-2025-31161 exploited since March 30; 815 systems unpatched as agencies race to secure.