CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The US Department of Homeland Security ordered all federal civilian agencies to remove DeepSeek products and services from IT systems. This directive, signed by Secretary Markwayne Mullin, prohibits the procurement of DeepSeek technology and affects third-party tools integrating these models. Separately, CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog. These include Plex2Shell flaws impacting Plex Media Server, specifically CVE-2026-96652, requiring agencies to patch these exploited vulnerabilities to ensure system security.