Cybersecurity May 29, 2026 CISA Set Today as the Deadline to Patch an Exchange Bug Under Active Attack CVE-2026-42897, a spoofing flaw in on-prem Exchange Server, is under active exploitation. CISA's federal patch deadline is May 29. Nadia Rao