SHINYHUNTERS TURNS EXTORTION TACTICS AGAINST CL0P AFTER APPARENTLY HIJACKING RANSOMWARE GANG’S LEAK SITE Blogging
CISA ADDS ACTIVELY EXPLOITED ZYXEL GS1900 SWITCH VULNERABILITY TO KEV CATALOG: STACK-BASED BUFFER OVERFLOW CAN ENABLE UNAUTHENTICATED COMMAND EXECUTION Blogging
CISA ADDS ACTIVELY EXPLOITED LINUX KERNEL TLS VULNERABILITY TO KEV CATALOG: CVE-2025-39682 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS TWO ACTIVELY EXPLOITED LINUX KERNEL VULNERABILITIES TO KEV CATALOG: RACE CONDITION AND OUT-OF-BOUNDS WRITE NOW REQUIRE PRIORITY REMEDIATION Blogging
CISA, FBI, NSA, U.S. SECRET SERVICE, DC3 AND KNPA WARN GUNRA RANSOMWARE IS TARGETING GOVERNMENT AND CRITICAL INFRASTRUCTURE WORLDWIDE Blogging
CISA ADDS TWO ACTIVELY EXPLOITED FORTINET AND ARISTA VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
RUSSIAN STATE-SUPPORTED CYBER ACTORS EXPLOIT ZIMBRA ZERO-DAY TO STEAL EMAILS, CREDENTIALS AND AUTHENTICATION DATA Blogging
IRANIAN-AFFILIATED CYBER ACTORS BREACH INDUSTRIAL CONTROL SYSTEMS ACROSS U.S. CRITICAL INFRASTRUCTURE Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Artificial Intelligence
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
IMPROVE ROUTER HYGIENE TO PROTECT AGAINST RUSSIAN STATE-SPONSORED TARGETING: INTERNATIONAL CYBERSECURITY AGENCIES ISSUE JOINT WARNING Blogging
CISA ADDS ACTIVELY EXPLOITED CISCO IOS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS TWO ACTIVELY EXPLOITED FILE UPLOAD VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED ADOBE COLDFUSION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Adobe
CISA ADDS THREE ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED MICROSOFT SHAREPOINT DESERIALIZATION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED SIMPLEHELP AUTHENTICATION BYPASS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
FBI AND CISA WARN OF CONTINUING RUSSIAN CYBER CAMPAIGN TARGETING COMMERCIAL MESSAGING APP USERS Blogging
CISA WARNS OF FORTIBLEED CREDENTIAL EXPOSURE IMPACTING TENS OF THOUSANDS OF FORTINET DEVICES Blogging
CISA ADDS ACTIVELY EXPLOITED JOOMLA VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED IVANTI SENTRY VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog Affecting Arista EOS, Google Chromium V8, and Cisco SD-WAN Infrastructure Blogging
CISA Adds SolarWinds Serv-U Vulnerability to KEV Catalog Following Confirmed Active Exploitation Activity Blogging
CISA Issues Active Exploitation Warning for Mirasvit Deserialization Vulnerability Added to KEV Catalog Blogging
Federal Watchdog Warns NIST Vulnerability Database Failures Are Undermining U.S. Cybersecurity Blogging
CISA Adds Actively Exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to KEV Catalog Blogging
CISA Adds Three Known Exploited Vulnerabilities to KEV Catalog Following Active Exploitation Activity Blogging
CISA Adds CVE-2026-48172 LiteSpeed cPanel Plugin Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
CISA Adds Actively Exploited Drupal Core SQL Injection Vulnerability to KEV Catalog Active Exploitation
CISA Adds Seven Known Exploited Vulnerabilities to KEV Catalog Following Active Exploitation Activity Blogging
ScadaBR ICS Platform Exposed to Critical Remote Code Execution Vulnerabilities Affecting Industrial Infrastructure Environments Blogging
ZKTeco CCTV Cameras Exposed to High-Severity Authentication Bypass Vulnerability Affecting Surveillance Infrastructure Blogging
CISA Orders Federal Agencies to Patch Actively Exploited Cisco SD-WAN Vulnerability by Sunday AI Threat Intelligence
CISA Adds Microsoft Exchange Server Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
Copper Theft Surge Targeting EV Charging Infrastructure Prompts Federal Cross-Sector Security Alert Blogging
Critical ABB AC500 PLC Vulnerability Exposes Industrial Systems to Potential Remote Code Execution Attacks Blogging
ABB Automation Builder Gateway Vulnerability Exposes Industrial Control Environments to Remote PLC Discovery Risks Blogging
Multiple Critical ABB AC500 V3 Vulnerabilities Expose Industrial Control Systems to Access Bypass, Certificate Manipulation, and Denial-of-Service Risks Blogging
CISA Expands Federal Hiring Push Across Cybersecurity, Infrastructure Security, Acquisition, and Incident Response Divisions Blogging
MAXHUB Pivot Client Application Exposed by Cryptographic Weakness in Newly Released ICS Advisory Blogging
CI FORTIFY: CISA WARNS CRITICAL INFRASTRUCTURE OPERATORS TO PREPARE FOR COMMUNICATIONS FAILURE, OT SABOTAGE, AND LONG-DURATION GEOPOLITICAL CYBER CONFLICT Blogging
FIVE EYES, FRAYED EDGES: UK Intelligence Officials Express Concern Over U.S. Cyber Leadership Instability Blogging
