Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

CISA adds CVE-2025-21042 to KEV catalog

Public Sector Action
First reported
Last updated
Happening score
H score 48
1 unique sources, 1 articles

Summary

Hide ▲

CISA added CVE-2025-21042 to the KEV catalog, triggering a formal federal response to a Samsung zero-day that had been reported as actively abused in spyware operations. The directive orders US federal agencies to apply vendor mitigations, follow BOD 22-01 cloud guidance, or discontinue use if mitigations are unavailable. Agencies must comply by December 1, and the flaw is an out-of-bounds write bug with a 9.8 CVSS score that Samsung patched in April.

Cases

Samsung image library flaw used to deliver LANDFALL spyware (5)

Related Happenings

Amazon Q Developer MCP trust flaw (CVE-2026-12957)

Vulnerability
H score32 First: 26.06.2026 16:53 Last: 26.06.2026 16:53 Sources 1

About this happening: **Amazon Q Developer** had a **high-severity** trust-boundary flaw in **MCP server** handling that could let a malicious repository trigger commands on a developer machine and ste...

Open Happening

FFmpeg 8.1.2 security update (CVE-2026-8461)

Security Patch Release
H score36 First: 23.06.2026 00:05 Last: 23.06.2026 00:05 Sources 1

About this happening: **FFmpeg** shipped **version 8.1.2** to fix **CVE-2026-8461** in the **MagicYUV decoder**, closing a heap out-of-bounds write that could affect **FFmpeg-based applications**. The...

Open Happening

Ghost CMS CVE-2026-26980 ClickFix campaign

Campaign
H score42 First: 24.05.2026 17:12 Last: 24.05.2026 17:12 Sources 1

About this happening: A **large-scale campaign** is exploiting **CVE-2026-26980** in **Ghost CMS** to plant malicious JavaScript and drive **ClickFix** lure pages, putting exposed sites and their visit...

Open Happening

CISA KEV order for Copy Fail on federal Linux devices

Public Sector Action
H score33 First: 08.05.2026 10:45 Last: 08.05.2026 10:45 Sources 1

About this happening: **CISA** added **Copy Fail** to the **Known Exploited Vulnerabilities (KEV) Catalog**, making the Linux flaw a federal remediation priority. The agency ordered **federal agencies*...

Open Happening

CISA KEV directive for CVE-2026-20133

Public Sector Action
H score36 First: 21.04.2026 15:30 Last: 21.04.2026 15:30 Sources 1

About this happening: On **Monday, April 21, 2026**, **CISA** added **CVE-2026-20133** to the **KEV Catalog** and ordered **FCEB agencies** to secure their networks by **Friday, April 24**. The directi...

Open Happening

Timeline

  1. 11.11.2025 12:30 2 articles · 8mo ago

    CISA adds CVE-2025-21042 to KEV catalog

    Legal Policy Action Update

    CISA added CVE-2025-21042, an out-of-bounds write flaw with a CVSS score of 9.8, to the Known Exploited Vulnerabilities catalog and told US federal agencies to apply vendor mitigations, follow BOD 22-01 cloud guidance, or discontinue use of the product if mitigations are unavailable.

    Show sources
    Open in new tab
  2. 11.11.2025 12:30 1 articles · 8mo ago

    Public disclosure links CVE-2025-21042 to LandFall spyware

    Initial Disclosure

    Public reporting describes a spyware campaign against Samsung devices in which LandFall was embedded in malicious DNG image files sent through WhatsApp to targets in the Middle East, with possible zero-click remote code execution and surveillance capabilities including microphone recording, location tracking, and collection of photos, contacts, and call logs.

    Show sources
    Open in new tab
  3. 11.11.2025 12:30 1 articles · 8mo ago

    Federal agencies face December 1 remediation deadline

    Legal Policy Action Update

    US federal agencies must meet the December 1 deadline to apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable for CVE-2025-21042.

    Show sources
    Open in new tab