Security News CISA warns of actively exploited Windows, Sophos, and Oracle bugs BleepingComputer Daniel Bender Nov 17, 2023 The U.S. Cybersecurity & Infrastructure Security Agency has added to its catalog of known exploited vulnerabilities (KEV) three security issues that affect Microsoft devices, a Sophos product, and an enterprise solution from Oracle.