CISA ADDS TWO ACTIVELY EXPLOITED PHP VULNERABILITIES TO KEV CATALOG AND UPDATES CRITICAL PHP ALERT Blogging
CISA ADDS ACTIVELY EXPLOITED ARISTA VELOCLOUD ORCHESTRATOR SQL INJECTION VULNERABILITY TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED COLLABORA ONLINE CODE SERVER COMMAND INJECTION VULNERABILITY TO KEV CATALOG Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED PALO ALTO NETWORKS, CISCO, AND AHSAY VULNERABILITIES TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED MICROSOFT WINDOWS AND IVANTI CONNECT SECURE VULNERABILITIES TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED CITRIX NETSCALER VULNERABILITY TO KEV CATALOG: CVE-2026-88779 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS TWO ACTIVELY EXPLOITED ZAMMAD VULNERABILITIES TO KEV CATALOG: SESSION FIXATION AND PRIVILEGE ESCALATION FLAWS CAN FORM A CRITICAL ATTACK CHAIN Blogging
CISCO CATALYST SD-WAN MANAGER CVE-2026-76504 ADDED TO CISA KEV CATALOG AFTER CONFIRMED ACTIVE EXPLOITATION Blogging
GOOGLE THREAT INTELLIGENCE SAYS VULNERABILITY DISCLOSURES DOUBLED IN 2026 AS AI CHANGES DISCOVERY AND EXPLOITATION Artificial Intelligence
CISA ADDS TWO ACTIVELY EXPLOITED CITRIX NETSCALER VULNERABILITIES TO KEV CATALOG: CVE-2026-88771 AND CVE-2026-88772 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS ACTIVELY EXPLOITED WORDPRESS CORE VULNERABILITY TO KEV CATALOG: CVE-2026-87902 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES AFFECTING CHECK POINT, ARISTA VELOCLOUD, AND F5 BIG-IP TO KEV CATALOG Blogging
CISA ADDS THREE ACTIVELY EXPLOITED VULNERABILITIES TO KEV CATALOG ACROSS JFROG ARTIFACTORY AND CONNECTWISE SCREENCONNECT Active Exploitation
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KEV CATALOG: ADOBE COMMERCE, MICROSOFT WINDOWS, AND N-ABLE N-CENTRAL AFFECTED Active Exploitation
CISA VULNERABILITY REVIEW WARNS BASIC SOFTWARE FAILURES STILL DRIVE MOST CYBER COMPROMISES AI Vulnerabilities
PAPERCUT WARNS OF ACTIVE CYBERATTACKS EXPLOITING HIGH-SEVERITY FLAWS IN NG AND MF PRINT MANAGEMENT SERVERS Active Exploitation
CISA ADDS ACTIVELY EXPLOITED ZIMBRA COLLABORATION SUITE COMMAND-INJECTION VULNERABILITY TO KEV CATALOG Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED MICROSOFT, VMWARE AND APPLE VULNERABILITIES TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED PROGRESS LOADMASTER COMMAND-INJECTION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS THREE ACTIVELY EXPLOITED IBM LANGFLOW, N-ABLE N-CENTRAL AND APACHE TOMCAT VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Active Exploitation
CISA ADDS ACTIVELY EXPLOITED JETBRAINS TEAMCITY DESERIALIZATION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Active Exploitation
CISA ADDS ACTIVELY EXPLOITED N-ABLE N-CENTRAL AUTHENTICATION-BYPASS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS TWO ACTIVELY EXPLOITED FILE UPLOAD VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA WARNS OF FORTIBLEED CREDENTIAL EXPOSURE IMPACTING TENS OF THOUSANDS OF FORTINET DEVICES Blogging
CISA ADDS ACTIVELY EXPLOITED IVANTI SENTRY VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog Affecting Arista EOS, Google Chromium V8, and Cisco SD-WAN Infrastructure Blogging
CISA Adds Actively Exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to KEV Catalog Blogging
CISA Adds Three Known Exploited Vulnerabilities to KEV Catalog Following Active Exploitation Activity Blogging
CISA Adds Actively Exploited Drupal Core SQL Injection Vulnerability to KEV Catalog Active Exploitation
CISA Adds Microsoft Exchange Server Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
CRITICAL ICS ALERT: ANVIZ DEVICE ECOSYSTEM EXPOSED TO HIGH-SEVERITY VULNERABILITIES WITH FULL SYSTEM COMPROMISE POTENTIAL Blogging
CISA FLAGS SEVEN ACTIVELY EXPLOITED VULNERABILITIES ACROSS MICROSOFT, ADOBE, AND FORTINET SYSTEMS Blogging
KEV CATALOG EXPANSION — F5 BIG-IP REMOTE CODE EXECUTION VULNERABILITY ADDED AFTER ACTIVE EXPLOITATION CONFIRMED Blogging
ICS ACCESS CONTROL FAILURE — OPENCODE MESSAGING AND USSD GATEWAY VULNERABILITY ENABLES CROSS-TENANT SMS DATA EXPOSURE Blogging
CISA Orders Emergency Patch After Exploited SolarWinds Web Help Desk Vulnerability Bypasses Prior Fixes Blogging
CISA Retires Ten Emergency Directives as KEV Enforcement Replaces Crisis-Driven Patch Mandates Blogging
Global Surveillance Exposed: The TAG-100 Cyber Espionage Operation. Advanced Persistent Threats (APT)
