Security News CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited TheHackerNews Daniel Bender 07 Jan 2026 CISA adds two vulnerabilities affecting Microsoft Office and HPE OneView to its KEV list, urging agencies to patch by January 28, 2026.