CISA adds Wing FTP CVE-2025-47813 to KEV after active exploitation, exposing server paths and aiding attacks; patch by March 30, 2026.
Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...