At least two websites appear to be victim to 404 hijacking attacks. Army officials took the sites down after being contacted by CyberScoop.

The agency added the flaw to the KEV list days after hosting providers confirmed active, ongoing attacks.