CISA added four actively exploited vulnerabilities to its KEV catalog, urging U.S. federal agencies to apply fixes by February 12, 2026.

The Tidyverse Blog offers insights, tutorials, and updates on the Tidyverse, a collection of R packages for data science and statistical computing. Covering topics such as data manipulation, visualization, and analysis, the blog provides resources for R developers looking to leverage the power of the Tidyverse for their data projects. Developers can learn how to use Tidyverse packages effectively to clean, transform, and analyze data in R.

The Hacker News

CISA added four actively exploited vulnerabilities to its KEV catalog: a PHP remote file inclusion flaw in Zimbra Collaboration Suite, an authentication bypass in Versa Concerto SD-WAN, an improper access control issue in Vite, and embedded malicious code in eslint-config-prettier from a supply chain attack. The eslint vulnerability stems from a phishing campaign that compromised maintainer credentials to publish trojanized npm packages. U.S. federal agencies must apply fixes by February 12, 2026, with exploitation of the Zimbra vulnerability confirmed since January 14, 2026.

CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities