The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is warning of Broadcom Brocade Fabric OS, Commvault web servers, and Qualitia Active! Mail clients vulnerabilities that are actively exploited in attacks.

The flaws were added yesterday to CISA’s ‘Known Exploited Vulnerabilities’ (KEV) catalog, with the Broadcom Brocade Fabric OS and Commvault flaws not previously tagged as exploited.

Broadcom Brocade Fabric OS is a specialized operating system that runs on the company’s Brocade Fibre Channel switches to manage and optimize storage area networks (SAN).

Earlier this month, Broadcom disclosed an arbitrary code execution flaw impacting Fabric OS versions 9.1.0 through 9.1.1d6, tracked under CVE-2025-1976.

While the flaw requires admin privileges to exploit, Broadcom says it has been actively exploited in attacks.

“This vulnerability can allow the user to execute any existing Fabric OS command or can also be used to modify the Fabric OS itself, including adding their own subroutines,” reads Broadcom’s bulletin.

“Even though achieving this exploit first requires valid access to a role with admin privileges, this vulnerability has been actively exploited in the field.”

CVE-2025-1976 was addressed with the release of Brocade Fabric OS 9.1.1d7. The latest branch, 9.2.0, is not impacted by this vulnerability.

The Commvault flaw, tracked under CVE-2025-3928, is an unspecified security problem that authenticated attackers can exploit remotely to plant webshells on target servers.

Commvault web servers are user-facing and API components of a backup system used by enterprises to protect and restore critical data.

Despite the requirements for authentication and exposure of the environment to the internet, the flaw is under active exploitation in the wild.

CVE-2025-3928 was fixed in versions 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms.

The third flaw CISA added to KEV is CVE-2025-42599, a stack-based buffer overflow problem impacting all versions of Active! up to and including ‘BuildInfo: 6.60.05008561’ on all OS platforms.

Active! mail is a web-based email client widely used by government, financial, and IT service organizations in Japan.

The flaw was flagged as actively exploited last week by Japan’s CERT, while SMB providers and ISPs in the country also announced service outages caused by related exploitation activity.

Qualitia addressed the problem with the release of Active! Mail 6 BuildInfo: 6.60.06008562.

CISA has given impacted organizations until May 17, 2025, to apply fixes or available mitigations for CVE-2025-3928 and May 19, 2025, for the other two flaws.

Bitcoin (BTC) risks becoming part of a “classic bull trap” when the US-China trade war takes its next step, analysis warns.

In its latest bulletin to Telegram channel subscribers on April 10, trading firm QCP Capital cautioned over the latest crypto price rebound.

QCP: Chinese “countermeasures” may leave crypto bulls stranded

Bitcoin and altcoins joined global stock markets in rallying over the past 24 hours thanks to a decision by US President Donald Trump to pause many of his new trade tariffs.

China was a clear exception to the policy, however, with Trump doubling down on tariffs while alleviating pressure on other countries. 

For QCP, now is the time not for relief, but to brace for China’s next move.

“With China singled out so explicitly, market participants are bracing for Beijing’s counterpunch,” it explained. 

“Should retaliation materialise in force, the exuberant rally could quickly morph into a classic bull trap.”

Such a scenario would form a repeat of market behavior already seen this week. As Cointelegraph reported, an earlier rumor of a tariff pause, which failed to find official confirmation sparked whipsaw stock moves never seen before.

“The surprise policy pivot temporarily soothed market anxiety, driving short-end crypto vols lower. Still, we advocate caution,” QCP continued. 

“Our desk continues to observe topside selling in May and June, suggesting that market makers are using the rally as an opportunity to offload unwanted positions.”

Bitcoin to get “meaningful slice” of yuan outflows

Others noted potential tailwinds for Bitcoin in the form of Chinese yuan devaluation as a stopgap measure in the trade dispute. USD/CNY hit 18-year lows of 7.35 on the day.

Related: Crypto stocks see big gains alongside US stock market rebound

No deal, PBOC continues a very gradual yuan weakening. Shit ‘bout to get spicy. Luckily $BTC loves money printing and associated ccy weakness. pic.twitter.com/RcVkSj54O3

— Arthur Hayes (@CryptoHayes) April 10, 2025

“China beginning currency devaluation is more than just an economic signal—it’s a trigger,” Sina, co-founder of asset management firm 21st Capital, told X followers in part of a post on the topic. 

“Historically, when the yuan weakens, capital doesn’t stay put. It escapes. Some of it flows into gold, some into foreign assets—and a meaningful slice finds its way into Bitcoin.”

Sina suggested that the macroeconomic reality would make BTC exposure more attractive going forward.

“Now layer on rising tariffs, slowing global trade, and a deepening crisis of confidence in traditional financial systems. The result? A growing demand for neutral, borderless, incorruptible assets,” he concluded. 

“Bitcoin isn’t just a hedge anymore. It’s becoming a necessity in a world looking for stability outside the control of any one nation.”

In subsequent discussions, however, he acknowledged that Bitcoin had unlikely put in a long-term price bottom.

Previously, Cointelegraph reported on various BTC price targets for a sustained rebound, with many of these focusing on $70,000.

This article does not contain investment advice or recommendations. Every investment and trading move involves risk, and readers should conduct their own research when making a decision.