Security News CISA orders feds to patch BlueHammer flaw exploited as zero-day BleepingComputer Daniel Bender 23 Apr 2026 CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has been exploited in zero-day attacks.