The weekly archive
251 weekly archive pages are compiled from public records, covering the weeks of January 3, 2022 to October 26, 2026. The most recent page, “Week of December 26, 2022: LastPass Fallout and CPRA Takes Effect”, was compiled November 6, 2026.
What happened in security leadership, one week at a time, from January 2022. Every page was compiled on or after September 27, 2026 from public records and is labelled that way; none of it is presented as a briefing that went out at the time. 251 weeks are compiled so far, and more are added as each one is sourced and checked.
Updated
2026 · 43 weeks compiled
Week 2 · Jan 5 – Jan 11, 2026Week of January 5, 2026: CISA Retires Ten Directives, UK Unveils £210M Cyber Plan
Week 3 · Jan 12 – Jan 18, 2026Week of January 12, 2026: IonQ and Cbus name CISOs, and Microsoft disrupts the RedVDS fraud service
Week 4 · Jan 19 – Jan 25, 2026Week of January 19, 2026: Fortinet Patch Bypass and EU Cybersecurity Act Overhaul
Week 5 · Jan 26 – Feb 1, 2026Week of January 26, 2026: Fortinet SSO Bypass Under Active Attack, CISA Expands KEV Catalog
Week 6 · Feb 2 – Feb 8, 2026Week of February 2, 2026: CISA Mandates Edge-Device Overhaul; Microsoft, Pennsylvania Name New CISOs
Week 7 · Feb 9 – Feb 15, 2026Week of February 9, 2026: Poland Energy Wiper Attack Alert and CISA's KEV Surge
Week 8 · Feb 16 – Feb 22, 2026Week of February 16, 2026: Dell zero-day exploited, Adidas and French bank breaches disclosed
Week 9 · Feb 23 – Mar 1, 2026Week of February 23, 2026: Cisco SD-WAN zero-day dates to 2023, and CISA orders emergency fixes
Week 10 · Mar 2 – Mar 8, 2026Week of March 2, 2026: CISA KEV Surge, Cisco SD-WAN Exploits, and Coruna iOS Spyware
Week 11 · Mar 9 – Mar 15, 2026Week of March 9, 2026: Salesforce Data-Theft Claim, Russian Signal/WhatsApp Hacking
Week 12 · Mar 16 – Mar 22, 2026Week of March 16, 2026: Stryker Cyberattack Alert and a Wave of KEV Additions
Week 13 · Mar 23 – Mar 29, 2026Week of March 23, 2026: CareCloud discloses patient data breach; FCC bans foreign-made routers
Week 14 · Mar 30 – Apr 5, 2026Week of March 30, 2026: EU Commission breach and Hasbro cyberattack
Week 15 · Apr 6 – Apr 12, 2026Week of April 6, 2026: Iranian actors disrupt US PLCs, and Stryker calls its March incident material
Week 16 · Apr 13 – Apr 19, 2026Week of April 13, 2026: Rockstar Games Breach and Basic-Fit Data Exposure
Week 17 · Apr 20 – Apr 26, 2026Week of April 20, 2026: FIRESTARTER Backdoor Hits Cisco Firewalls, Axios npm Supply Chain Hit
Week 18 · Apr 27 – May 3, 2026Week of April 27, 2026: ADT Breach Disclosure and UK Biobank Data Exposure
Week 19 · May 4 – May 10, 2026Week of May 4, 2026: Palo Alto firewall zero-day, DigiCert breach, cPanel mass exploitation
Week 20 · May 11 – May 17, 2026Week of May 11, 2026: West Pharma, CB Financial Disclose Breaches; ICO Fines Water Utility
Week 21 · May 18 – May 24, 2026Week of May 18, 2026: TeamPCP breaches GitHub's internal repos, and the DBIR puts exploitation first
Week 22 · May 25 – May 31, 2026Week of May 25, 2026: CISA KEV Surge and Nx/GitHub Supply-Chain Compromise
Week 23 · Jun 1 – Jun 7, 2026Week of June 1, 2026: CISA Warns on Tank Gauge Hacking, Adds Four KEV Flaws
Week 24 · Jun 8 – Jun 14, 2026Week of June 8, 2026: CISA's BOD 26-04 Directive and New CISO Hires at GitLab, Infoblox
Week 25 · Jun 15 – Jun 21, 2026Week of June 15, 2026: FortiBleed Credential Leak and iRhythm Breach Disclosure
Week 26 · Jun 22 – Jun 28, 2026Week of June 22, 2026: FortiBleed Exposed; 8x8, River Financial Disclose Breaches
Week 27 · Jun 29 – Jul 5, 2026Week of June 29, 2026: AdaptHealth and Navient file 8-Ks, and a SimpleHelp bypass delivers Djinn Stealer
Week 28 · Jul 6 – Jul 12, 2026Week of July 6, 2026: CISA's Own Breach Lessons and Active ColdFusion, Langflow Exploits
Week 29 · Jul 13 – Jul 19, 2026Week of July 13, 2026: Russian router warnings, SonicWall and ShareFile zero-days
Week 30 · Jul 20 – Jul 26, 2026Week of July 20, 2026: Russian Zero-Click Zimbra Campaign and Upbound's $13 Million Fraud Loss
Week 31 · Jul 27 – Aug 2, 2026Week of July 27, 2026: Amgen Discloses Breach, CISA Warns on Water Sector PLC Attacks
Week 32 · Aug 3 – Aug 9, 2026Week of August 3, 2026: CISA's six-flaw KEV sprint and a new Dallas CISO
Week 33 · Aug 10 – Aug 16, 2026Week of August 10, 2026: Ralph Lauren and Tricentis hire CISOs, and a Metabase zero-day exposes customer data
Week 34 · Aug 17 – Aug 23, 2026Week of August 17, 2026: Siemens PLC Threat Advisory and a Wave of CISO Moves
Week 35 · Aug 24 – Aug 30, 2026Week of August 24, 2026: UK power plant attack, Boston Scientific outage, PaperCut zero-days
Week 36 · Aug 31 – Sep 6, 2026Week of August 31, 2026: McKesson Breach Claims, PaperCut Zero-Days Exploited
Week 37 · Sep 7 – Sep 13, 2026Week of September 7, 2026: Boston Scientific's Cyber Hit and CISA's China AI Warning
Week 38 · Sep 14 – Sep 20, 2026Week of September 14, 2026: Cisco Email Gateway Zero-Day and CenterPoint Energy Breach
Week 39 · Sep 21 – Sep 27, 2026Week of September 21, 2026: Zyxel switches and WordPress under attack, and the MSC names a CISO
Week 40 · Sep 28 – Oct 4, 2026Week of September 28, 2026: NetScaler zero-day fallout and an FBI breach claim
Week 41 · Oct 5 – Oct 11, 2026Week of October 5, 2026: China-Linked Hacking Enabler Named, FortiBleed Locks Out Admins
Week 42 · Oct 12 – Oct 18, 2026Week of October 12, 2026: BeyondTrust KEV Addition and New CISOs at Acronis, Nike, Pega
Week 43 · Oct 19 – Oct 25, 2026Week of October 19, 2026: SafePay Ransomware Advisory and PHP2Shell Flaws Dominate Patch Alerts
Week 44 · Oct 26 – Nov 1, 2026Week of October 26, 2026: CISA 2030 Strategy, UNM Health Cyberattack, Brotli Flaw Exploited
2025 · 52 weeks compiled
Week 2 · Jan 6 – Jan 12, 2025Week of January 6, 2025: Treasury-BeyondTrust Breach and Ivanti VPN Zero-Day Dominate
Week 3 · Jan 13 – Jan 19, 2025Week of January 13, 2025: FortiGate zero-day and config leak, and the FBI deletes PlugX
Week 4 · Jan 20 – Jan 26, 2025Week of January 20, 2025: CISA's Ivanti Advisory and New KEV Additions
Week 5 · Jan 27 – Feb 2, 2025Week of January 27, 2025: Contec Monitor Backdoor, SonicWall Flaw Under Attack
Week 6 · Feb 3 – Feb 9, 2025Week of February 3, 2025: Atlassian Names New CISO, CISA Flags Trimble Cityworks Exploit
Week 7 · Feb 10 – Feb 16, 2025Week of February 10, 2025: 8Base leak site seized, and Microsoft patches two exploited zero-days
Week 8 · Feb 17 – Feb 23, 2025Week of February 17, 2025: Ghost Ransomware Alert and DoD CISO Return
Week 9 · Feb 24 – Mar 2, 2025Week of February 24, 2025: CISA Advisories, DISA Breach Disclosure, and M365 Botnet
Week 10 · Mar 3 – Mar 9, 2025Week of March 3, 2025: BianLian Extortion Mailers and Dual Ransomware Disclosures
Week 11 · Mar 10 – Mar 16, 2025Week of March 10, 2025: Medusa Ransomware Advisory and CISA's KEV Catalog Additions
Week 12 · Mar 17 – Mar 23, 2025Week of March 17, 2025: GitHub Actions Supply-Chain Compromise and New CISO Appointments
Week 13 · Mar 24 – Mar 30, 2025Week of March 24, 2025: Oracle Cloud breach samples check out, and Chrome fixes a sandbox escape zero-day
Week 14 · Mar 31 – Apr 6, 2025Week of March 31, 2025: Ivanti Zero-Day Alert and Fast Flux Threat Advisory
Week 15 · Apr 7 – Apr 13, 2025Week of April 7, 2025: Sensata Ransomware Disclosure, Krebs Clearance Revoked
Week 16 · Apr 14 – Apr 20, 2025Week of April 14, 2025: The CVE program nearly loses its contract, and Conduent reports stolen client data
Week 17 · Apr 21 – Apr 27, 2025Week of April 21, 2025: CISA's ICS Advisory Wave and CVE Program Reassurance
Week 18 · Apr 28 – May 4, 2025Week of April 28, 2025: M&S Ransomware Attack and SAP NetWeaver Zero-Day Hit CISA's KEV List
Week 19 · May 5 – May 11, 2025Week of May 5, 2025: Masimo slows production after an intrusion, and LockBit's own panel is hacked
Week 20 · May 12 – May 18, 2025Week of May 12, 2025: Coinbase Extortion Disclosure, Nucor Production Halt
Week 21 · May 19 – May 25, 2025Week of May 19, 2025: CISA Deputy Director Named, Lumma Stealer Takedown
Week 22 · May 26 – Jun 1, 2025Week of May 26, 2025: Laundry Bear Espionage Exposed, DragonForce Hits MSP Clients
Week 23 · Jun 2 – Jun 8, 2025Week of June 2, 2025: New AWS, DTCC CISOs; CISA Updates Play Ransomware Advisory
Week 24 · Jun 9 – Jun 15, 2025Week of June 9, 2025: SimpleHelp Ransomware Advisory and Zoomcar's 8.4 Million-User Breach
Week 25 · Jun 16 – Jun 22, 2025Week of June 16, 2025: Scattered Spider turns to insurers as Aflac discloses a breach, and Nobitex is drained
Week 26 · Jun 23 – Jun 29, 2025Week of June 23, 2025: UNFI's Cyber Incident Hits Earnings, CISA Pushes Code Safety
Week 27 · Jun 30 – Jul 6, 2025Week of June 30, 2025: Iran Infrastructure Warning and Microsoft CISO Arsenault's Exit
Week 28 · Jul 7 – Jul 13, 2025Week of July 7, 2025: CISA's Citrix KEV Alert and New Field CISO Appointments
Week 29 · Jul 14 – Jul 20, 2025Week of July 14, 2025: SharePoint ToolShell Exploits and NoName057(16) Takedown
Week 30 · Jul 21 – Jul 27, 2025Week of July 21, 2025: SharePoint Attacks Escalate, CISA Adds Six KEVs
Week 31 · Jul 28 – Aug 3, 2025Week of July 28, 2025: Palo Alto Networks bids $25 billion for CyberArk, and St. Paul calls in the Guard
Week 32 · Aug 4 – Aug 10, 2025Week of August 4, 2025: Emergency Exchange Directive and SharePoint ToolShell Report
Week 33 · Aug 11 – Aug 17, 2025Week of August 11, 2025: CISA ICS Advisory Surge and N-able, WinRAR Join KEV List
Week 34 · Aug 18 – Aug 24, 2025Week of August 18, 2025: Data I/O Ransomware Disclosure, Apple Zero-Day Hits CISA KEV
Week 35 · Aug 25 – Aug 31, 2025Week of August 25, 2025: China-Linked Telecom Advisory and Nevada Cyberattack
Week 36 · Sep 1 – Sep 7, 2025Week of September 1, 2025: CISA Names New Cyber Chief, Expands KEV Catalog
Week 37 · Sep 8 – Sep 14, 2025Week of September 8, 2025: Phished npm maintainer poisons popular packages, and JLR confirms data theft
Week 38 · Sep 15 – Sep 21, 2025Week of September 15, 2025: npm worm spreads, SonicWall backups breached
Week 39 · Sep 22 – Sep 28, 2025Week of September 22, 2025: Cisco Zero-Day Emergency Directive and npm Supply-Chain Worm
Week 40 · Sep 29 – Oct 5, 2025Week of September 29, 2025: CISA KEV additions and a claimed Red Hat GitLab breach
Week 41 · Oct 6 – Oct 12, 2025Week of October 6, 2025: CISA Flags Oracle EBS Flaw and Issues ICS Advisories
Week 42 · Oct 13 – Oct 19, 2025Week of October 13, 2025: F5 Breach Disclosure and CISA's Emergency F5 Directive
Week 43 · Oct 20 – Oct 26, 2025Week of October 20, 2025: A DNS race condition takes down AWS us-east-1, and WSUS gets an emergency patch
Week 44 · Oct 27 – Nov 2, 2025Week of October 27, 2025: CISA's Exchange Hardening Push and WSUS Exploitation
Week 45 · Nov 3 – Nov 9, 2025Week of November 3, 2025: SonicWall Breach Attribution and New CISA KEV Additions
Week 46 · Nov 10 – Nov 16, 2025Week of November 10, 2025: FortiWeb Exploits and Updated Akira Ransomware Guidance
Week 47 · Nov 17 – Nov 23, 2025Week of November 17, 2025: Logitech Breach, Cloudflare Outage, CISA KEV Additions
Week 48 · Nov 24 – Nov 30, 2025Week of November 24, 2025: Gainsight-Salesforce breach widens, CISA flags spyware and OpenPLC flaw
Week 49 · Dec 1 – Dec 7, 2025Week of December 1, 2025: React2Shell flaw hits the KEV list, and CISA details China's BRICKSTORM backdoor
Week 50 · Dec 8 – Dec 14, 2025Week of December 8, 2025: CISA Warns of Pro-Russia Hacktivists, Unveils CPG 2.0
Week 51 · Dec 15 – Dec 21, 2025Week of December 15, 2025: Coupang Breach Disclosure, Cisco Zero-Day Backdoors
Week 52 · Dec 22 – Dec 28, 2025Week of December 22, 2025: WatchGuard Firewall Attacks, ServiceNow's $7.75B Armis Deal
Week 1 · Dec 29 – Jan 4, 2026Week of December 29, 2025: Coupang's $1.2 Billion Payout and a New MongoDB KEV Entry
2024 · 53 weeks compiled
Week 1 · Jan 1 – Jan 7, 2024Week of January 1, 2024: CISA Flags Exploited Flaws, Orrick Breach Grows to 638,000
Week 2 · Jan 8 – Jan 14, 2024Week of January 8, 2024: Ivanti zero-days under active exploitation and SEC's X account hijacked
Week 3 · Jan 15 – Jan 21, 2024Week of January 15, 2024: CISA's Ivanti Emergency Directive and Microsoft's Email Breach
Week 4 · Jan 22 – Jan 28, 2024Week of January 22, 2024: HPE's Midnight Blizzard Breach and Tietoevry's Akira Attack
Week 5 · Jan 29 – Feb 4, 2024Week of January 29, 2024: FBI dismantles Volt Typhoon's router botnet, and Ivanti gateways get two more flaws
Week 6 · Feb 5 – Feb 11, 2024Week of February 5, 2024: Volt Typhoon Warning, SouthState Bank Breach Disclosure
Week 7 · Feb 12 – Feb 18, 2024Week of February 12, 2024: Prudential Discloses Breach, Fortinet Zero-Day Exploited
Week 8 · Feb 19 – Feb 25, 2024Week of February 19, 2024: Police seize LockBit's infrastructure, and Change Healthcare is breached
Week 9 · Feb 26 – Mar 3, 2024Week of February 26, 2024: Ivanti Exploitation Warning and Cencora Breach Disclosure
Week 10 · Mar 4 – Mar 10, 2024Week of March 4, 2024: Change Healthcare Fallout, Microsoft's Widening Breach
Week 11 · Mar 11 – Mar 17, 2024Week of March 11, 2024: HHS opens a Change Healthcare HIPAA probe, and EU lawmakers pass the AI Act
Week 12 · Mar 18 – Mar 24, 2024Week of March 18, 2024: Volt Typhoon Warning and a Wave of Breach Disclosures
Week 13 · Mar 25 – Mar 31, 2024Week of March 25, 2024: XZ Utils Backdoor Surfaces as CISA Pushes New Cyber Rules
Week 14 · Apr 1 – Apr 7, 2024Week of April 1, 2024: Ivanti Gateway Flaws, MarineMax's Amended Breach Filing
Week 15 · Apr 8 – Apr 14, 2024Week of April 8, 2024: CISA's Midnight Blizzard Directive and a Palo Alto Zero-Day
Week 16 · Apr 15 – Apr 21, 2024Week of April 15, 2024: Frontier Breach Disclosure, Akira Ransomware Advisory
Week 17 · Apr 22 – Apr 28, 2024Week of April 22, 2024: Change Healthcare theft may cover much of the US, and ArcaneDoor hits Cisco ASA
Week 18 · Apr 29 – May 5, 2024Week of April 29, 2024: Dropbox Sign Breach, CISA's Directory Traversal Alert
Week 19 · May 6 – May 12, 2024Week of May 6, 2024: Black Basta Advisory, Key Tronic and Brandywine SEC Filings
Week 20 · May 13 – May 19, 2024Week of May 13, 2024: CISA's Eric Goldstein Departs, KEV Catalog Expands
Week 21 · May 20 – May 26, 2024Week of May 20, 2024: SEC's 30-day breach rule and the CyberArk-Venafi deal
Week 22 · May 27 – Jun 2, 2024Week of May 27, 2024: CISA Adds Four Exploited CVEs While CISO Moves Hit Synechron, ZeroFox
Week 23 · Jun 3 – Jun 9, 2024Week of June 3, 2024: Synnovis ransomware hits London hospitals, and CISA flags Snowflake account attacks
Week 24 · Jun 10 – Jun 16, 2024Week of June 10, 2024: CISA KEV Additions, Globe Life and Key Tronic Disclosures
Week 25 · Jun 17 – Jun 23, 2024Week of June 17, 2024: CISA Network Access Guidance, New CISOs at Reco and ARPA-H
Week 26 · Jun 24 – Jun 30, 2024Week of June 24, 2024: Indonesia Data Center Ransomware, Croatia Hospital Cyberattack
Week 27 · Jul 1 – Jul 7, 2024Week of July 1, 2024: Sonic Automotive Discloses CDK Fallout, CISA Flags Exploited Cisco Flaw
Week 28 · Jul 8 – Jul 14, 2024Week of July 8, 2024: AT&T Breach Disclosure and APT40 Advisory
Week 29 · Jul 15 – Jul 21, 2024Week of July 15, 2024: Faulty CrowdStrike update grounds Windows fleets, and Bassett files a ransomware 8-K
Week 30 · Jul 22 – Jul 28, 2024Week of July 22, 2024: LA County Courts Ransomware and North Korea Espionage Advisory
Week 31 · Jul 29 – Aug 4, 2024Week of July 29, 2024: VMware ESXi KEV Addition and Azure DDoS Outage
Week 32 · Aug 5 – Aug 11, 2024Week of August 5, 2024: BlackSuit Ransomware Advisory and New CISO Appointments
Week 33 · Aug 12 – Aug 18, 2024Week of August 12, 2024: CISA Adds SolarWinds Flaw to KEV, Microsoft Ships August Patches
Week 34 · Aug 19 – Aug 25, 2024Week of August 19, 2024: CISA Expands KEV Catalog, CISO-Adjacent Moves
Week 35 · Aug 26 – Sep 1, 2024Week of August 26, 2024: Volt Typhoon exploits a Versa Director zero-day, and CISA profiles RansomHub
Week 36 · Sep 2 – Sep 8, 2024Week of September 2, 2024: GRU Unit 29155 Advisory and Transport for London Cyberattack
Week 37 · Sep 9 – Sep 15, 2024Week of September 9, 2024: SonicWall, Ivanti flaws exploited; Microsoft patches four zero-days
Week 38 · Sep 16 – Sep 22, 2024Week of September 16, 2024: CISA's FOCAL Plan and Ivanti CSA Exploitation
Week 39 · Sep 23 – Sep 29, 2024Week of September 23, 2024: Ivanti KEV Addition, Telegram Data-Sharing Shift
Week 40 · Sep 30 – Oct 6, 2024Week of September 30, 2024: CISA Adds KEV Entries, Aembit Names New CISO
Week 41 · Oct 7 – Oct 13, 2024Week of October 7, 2024: American Water discloses a cyberattack, and the FTC settles with Marriott
Week 42 · Oct 14 – Oct 20, 2024Week of October 14, 2024: Iranian Brute-Force Advisory and CISO Moves at OpenAI, Keeper
Week 43 · Oct 21 – Oct 27, 2024Week of October 21, 2024: FortiManager Zero-Day Fallout and PRC Telecom Intrusion
Week 44 · Oct 28 – Nov 3, 2024Week of October 28, 2024: CISA's RDP Phishing Alert and Sophos's China Counter-Op
Week 45 · Nov 4 – Nov 10, 2024Week of November 4, 2024: CISA KEV Additions and Election Day Cybersecurity Assurances
Week 46 · Nov 11 – Nov 17, 2024Week of November 11, 2024: PRC Telecom Espionage Disclosed, KPMG Names New CISO
Week 47 · Nov 18 – Nov 24, 2024Week of November 18, 2024: PAN-OS zero-days compromise 2,000 firewalls, and ransomware halts Blue Yonder
Week 48 · Nov 25 – Dec 1, 2024Week of November 25, 2024: Blue Yonder Ransomware Hits Starbucks, New CISA KEV Entry
Week 49 · Dec 2 – Dec 8, 2024Week of December 2, 2024: PRC Telecom Hack Guidance and ENGlobal Ransomware Disclosure
Week 50 · Dec 9 – Dec 15, 2024Week of December 9, 2024: Cleo Zero-Day Exploited, Krispy Kreme Discloses Cyber Incident
Week 51 · Dec 16 – Dec 22, 2024Week of December 16, 2024: CISA Cloud Directive and BeyondTrust Zero-Day
Week 52 · Dec 23 – Dec 29, 2024Week of December 23, 2024: CISA KEV Addition, LockBit Developer Charged
Week 1 · Dec 30 – Jan 5, 2025Week of December 30, 2024: Treasury discloses a BeyondTrust-linked breach, and OFAC sanctions Integrity Tech
2023 · 52 weeks compiled
Week 1 · Jan 2 – Jan 8, 2023Week of January 2, 2023: CISA ICS Advisories, Wabtec Breach, LockBit Port Threat
Week 2 · Jan 9 – Jan 15, 2023Week of January 9, 2023: Rackspace Breach Details Emerge, Microsoft Patches Zero-Day
Week 3 · Jan 16 – Jan 22, 2023Week of January 16, 2023: T-Mobile says API abuse hit 37 million accounts, and Yum! Brands reports ransomware
Week 4 · Jan 23 – Jan 29, 2023Week of January 23, 2023: CISA RMM Phishing Warning and K-12 Security Report
Week 5 · Jan 30 – Feb 5, 2023Week of January 30, 2023: Ukraine Wiper Surge and Critical OAuth, QNAP, Jira Flaws
Week 6 · Feb 6 – Feb 12, 2023Week of February 6, 2023: ESXiArgs Ransomware Spree and DPRK Ransomware Funding Advisory
Week 7 · Feb 13 – Feb 19, 2023Week of February 13, 2023: Microsoft, Apple Patch Exploited Zero-Days; CISA Expands KEV List
Week 8 · Feb 20 – Feb 26, 2023Week of February 20, 2023: CISA Retires US-CERT, Adds Three Vulnerabilities to KEV
Week 9 · Feb 27 – Mar 5, 2023Week of February 27, 2023: A new US cyber strategy shifts the burden to vendors, and DISH confirms ransomware
Week 10 · Mar 6 – Mar 12, 2023Week of March 6, 2023: CISA Expands KEV List, Pushes Secure-by-Design Tech
Week 11 · Mar 13 – Mar 19, 2023Week of March 13, 2023: CISA Launches Ransomware Pilot, LockBit 3.0 Advisory Drops
Week 12 · Mar 20 – Mar 26, 2023Week of March 20, 2023: CISA Ransomware Notifications and Cisco's Nine-Advisory Patch Batch
Week 13 · Mar 27 – Apr 2, 2023Week of March 27, 2023: 3CX Supply Chain Attack and New KEV Additions
Week 14 · Apr 3 – Apr 9, 2023Week of April 3, 2023: CISA Expands KEV Catalog as Cisco, ICS Advisories Land
Week 15 · Apr 10 – Apr 16, 2023Week of April 10, 2023: Allies publish secure-by-design principles, Microsoft fixes an exploited CLFS flaw
Week 16 · Apr 17 – Apr 23, 2023Week of April 17, 2023: CISA Chief of Staff Transition and APT28 Cisco Router Advisory
Week 17 · Apr 24 – Apr 30, 2023Week of April 24, 2023: 3CX Supply Chain Fallout Widens, CISA Issues Multiple Advisories
Week 18 · May 1 – May 7, 2023Week of May 1, 2023: CISA KEV additions and NFL Draft security deployment
Week 19 · May 8 – May 14, 2023Week of May 8, 2023: PaperCut Ransomware Alert and Russian Snake Malware Exposed
Week 20 · May 15 – May 21, 2023Week of May 15, 2023: CISA's BianLian Advisory and JD Sports' Interim CISO
Week 21 · May 22 – May 28, 2023Week of May 22, 2023: Five Eyes expose Volt Typhoon, and Barracuda email gateways hit through a zero-day
Week 22 · May 29 – Jun 4, 2023Week of May 29, 2023: MOVEit Transfer zero-day exploited, and Barracuda ESG attacks traced to 2022
Week 23 · Jun 5 – Jun 11, 2023Week of June 5, 2023: CL0P's MOVEit Mass-Exploitation and CISA's KEV Additions
Week 24 · Jun 12 – Jun 18, 2023Week of June 12, 2023: CISA's Management-Interface Directive and LockBit Advisory
Week 25 · Jun 19 – Jun 25, 2023Week of June 19, 2023: CISA KEV Additions and New Cybersecurity Division Leaders
Week 26 · Jun 26 – Jul 2, 2023Week of June 26, 2023: CISA DDoS Alert, KEV Additions, and Election Security Shake-Up
Week 27 · Jul 3 – Jul 9, 2023Week of July 3, 2023: Ransomware halts Japan's busiest port, and JumpCloud invalidates admin API keys
Week 28 · Jul 10 – Jul 16, 2023Week of July 10, 2023: Storm-0558 Outlook Breach Advisory and Revolut's $20M Fraud
Week 29 · Jul 17 – Jul 23, 2023Week of July 17, 2023: Citrix NetScaler Zero-Day, VirusTotal Data Leak
Week 30 · Jul 24 – Jul 30, 2023Week of July 24, 2023: The SEC adopts its cyber disclosure rules, and an Ivanti zero-day hits Norway
Week 31 · Jul 31 – Aug 6, 2023Week of July 31, 2023: Ivanti EPMM Zero-Days Exploited, CISA Publishes Strategic Plan
Week 32 · Aug 7 – Aug 13, 2023Week of August 7, 2023: Barracuda Backdoors and August Patch Tuesday
Week 33 · Aug 14 – Aug 20, 2023Week of August 14, 2023: Clorox discloses an IT intrusion, Colorado warns 4 million over IBM MOVEit breach
Week 34 · Aug 21 – Aug 27, 2023Week of August 21, 2023: WinRAR zero-day exploited, Seiko hit by ALPHV ransomware
Week 35 · Aug 28 – Sep 3, 2023Week of August 28, 2023: QakBot Takedown and Infamous Chisel Malware Exposed
Week 36 · Sep 4 – Sep 10, 2023Week of September 4, 2023: CISA Warns on ManageEngine Exploits, Microsoft Explains Stolen Key
Week 37 · Sep 11 – Sep 17, 2023Week of September 11, 2023: KEV Adds Apple & Chrome Flaws; CISA Issues OSS Roadmap
Week 38 · Sep 18 – Sep 24, 2023Week of September 18, 2023: Snatch Ransomware Advisory and CISA KEV Catalog Additions
Week 39 · Sep 25 – Oct 1, 2023Week of September 25, 2023: Johnson Controls hit by ransomware, and allies warn of BlackTech router implants
Week 40 · Oct 2 – Oct 8, 2023Week of October 2, 2023: NSA-CISA misconfigurations advisory, Confluence zero-day added to KEV
Week 41 · Oct 9 – Oct 15, 2023Week of October 9, 2023: HTTP/2 Rapid Reset Fallout and Citrix NetScaler Flaws
Week 42 · Oct 16 – Oct 22, 2023Week of October 16, 2023: Cisco IOS XE Zero-Day, Atlassian Confluence Under Attack
Week 43 · Oct 23 – Oct 29, 2023Week of October 23, 2023: Cisco IOS XE KEV Additions and Okta Breach Fallout
Week 44 · Oct 30 – Nov 5, 2023Week of October 30, 2023: Citrix Bleed Mass Exploitation and Biden's AI Executive Order
Week 45 · Nov 6 – Nov 12, 2023Week of November 6, 2023: Ransomware disrupts ICBC's US arm, and Clop affiliate exploits a SysAid zero-day
Week 46 · Nov 13 – Nov 19, 2023Week of November 13, 2023: Scattered Spider Advisory, Rhysida Ransomware Guidance
Week 47 · Nov 20 – Nov 26, 2023Week of November 20, 2023: Citrix Bleed Hits Boeing, CISA-NCSC Unveil Secure AI Guidelines
Week 48 · Nov 27 – Dec 3, 2023Week of November 27, 2023: IRGC PLC Attacks on Water Utilities and Slovenian Power Ransomware
Week 49 · Dec 4 – Dec 10, 2023Week of December 4, 2023: Star Blizzard Advisory and ColdFusion Government Breach
Week 50 · Dec 11 – Dec 17, 2023Week of December 11, 2023: Russian SVR TeamCity Exploitation and CISA's Secure by Design Push
Week 51 · Dec 18 – Dec 24, 2023Week of December 18, 2023: SEC incident rule takes effect with VF's 8-K, and the FBI disrupts ALPHV/BlackCat
Week 52 · Dec 25 – Dec 31, 2023Week of December 25, 2023: First American's Cyber Incident Update and MFA Bypass Warnings
2022 · 51 weeks compiled
Week 1 · Jan 3 – Jan 9, 2022Week of January 3, 2022: FTC puts Log4j patching on notice, and FinalSite ransomware takes schools offline
Week 2 · Jan 10 – Jan 16, 2022Week of January 10, 2022: Russian Threat Advisory and Ukraine Wiper Malware Surface
Week 3 · Jan 17 – Jan 23, 2022Week of January 17, 2022: Ukraine wiper malware, CISA's urgent guidance
Week 5 · Jan 31 – Feb 6, 2022Week of January 31, 2022: CISA Adds Win32k Flaw to KEV; Citrix Agrees to $16.5B Buyout
Week 6 · Feb 7 – Feb 13, 2022Week of February 7, 2022: CISA's Shields Up Debut and SAP ICM Critical Flaws
Week 7 · Feb 14 – Feb 20, 2022Week of February 14, 2022: Russian hackers mine defense contractors, and DDoS hits Ukraine's banks
Week 8 · Feb 21 – Feb 27, 2022Week of February 21, 2022: Cyber attacks accompany Russia's invasion of Ukraine, and Cyclops Blink is exposed
Week 9 · Feb 28 – Mar 6, 2022Week of February 28, 2022: CISA's 95-Vulnerability KEV Update and Daxin Backdoor Disclosure
Week 10 · Mar 7 – Mar 13, 2022Week of March 7, 2022: Dirty Pipe Patches and Google's $5.4B Mandiant Deal
Week 11 · Mar 14 – Mar 20, 2022Week of March 14, 2022: Russian actors abuse default MFA settings, and ransomware hits the auto industry
Week 12 · Mar 21 – Mar 27, 2022Week of March 21, 2022: Lapsus$ hits Okta, Microsoft; CISA adds 66 KEVs
Week 13 · Mar 28 – Apr 3, 2022Week of March 28, 2022: Spring4Shell surfaces, and $620 million drained from the Ronin bridge
Week 14 · Apr 4 – Apr 10, 2022Week of April 4, 2022: Spring4Shell Hits CISA's KEV List, FBI Disrupts Cyclops Blink Botnet
Week 15 · Apr 11 – Apr 17, 2022Week of April 11, 2022: ICS/SCADA APT Tools Surface, Microsoft and VMware Rush Patches
Week 16 · Apr 18 – Apr 24, 2022Week of April 18, 2022: Russian Critical-Infrastructure Advisory and BlackCat Ransomware IOCs
Week 17 · Apr 25 – May 1, 2022Week of April 25, 2022: CISA/FBI Update Ukraine Wiper Advisory, Add 7 KEVs
Week 18 · May 2 – May 8, 2022Week of May 2, 2022: F5 BIG-IP Flaw and Five New KEV Entries, Ransomware Hits Colleges
Week 19 · May 9 – May 15, 2022Week of May 9, 2022: EU negotiators agree NIS2, and the US ties SATCOM attacks to Russia
Week 20 · May 16 – May 22, 2022Week of May 16, 2022: CISA's VMware Emergency Directive and F5 BIG-IP Alert
Week 21 · May 23 – May 29, 2022Week of May 23, 2022: Broadcom's $61B VMware deal and GM/Zola account hijackings
Week 22 · May 30 – Jun 5, 2022Week of May 30, 2022: Follina and Confluence Zero-Days Dominate CISA Advisories
Week 23 · Jun 6 – Jun 12, 2022Week of June 6, 2022: PRC Network-Device Exploits and CISA's KEV Catalog Expansion
Week 24 · Jun 13 – Jun 19, 2022Week of June 13, 2022: Microsoft's June Patches Meet a New CISA Known Exploited Vulnerability
Week 25 · Jun 20 – Jun 26, 2022Week of June 20, 2022: Log4Shell still hits VMware Horizon, and Conti takes its last servers offline
Week 26 · Jun 27 – Jul 3, 2022Week of June 27, 2022: CISA Expands KEV Catalog, Warns on MedusaLocker Ransomware
Week 27 · Jul 4 – Jul 10, 2022Week of July 4, 2022: Maui Ransomware Advisory and NIST's Post-Quantum Algorithms
Week 28 · Jul 11 – Jul 17, 2022Week of July 11, 2022: July Patch Tuesday Lands; CISA Adds New KEV Entry
Week 29 · Jul 18 – Jul 24, 2022Week of July 18, 2022: Confluence Zero-Day Alert and Oracle's 349-Bug Patch Update
Week 30 · Jul 25 – Jul 31, 2022Week of July 25, 2022: CISA Flags New KEV and Log4Shell Exploit; Everbridge Names New CEO
Week 31 · Aug 1 – Aug 7, 2022Week of August 1, 2022: Attack on supplier Advanced disrupts NHS 111, and German chambers go dark
Week 32 · Aug 8 – Aug 14, 2022Week of August 8, 2022: Cisco Confirms Ransomware Breach, Twilio Discloses Phishing Incident
Week 33 · Aug 15 – Aug 21, 2022Week of August 15, 2022: CISA's Zimbra Alert and Apple's Zero-Day Fixes
Week 34 · Aug 22 – Aug 28, 2022Week of August 22, 2022: 0ktapus Phishing Fallout and New CISA KEV Additions
Week 35 · Aug 29 – Sep 4, 2022Week of August 29, 2022: Apple Patches Exploited iOS Flaw, CISA Issues ICS Advisories
Week 36 · Sep 5 – Sep 11, 2022Week of September 5, 2022: Vice Society Ransomware Alert, Go-Ahead Cyberattack
Week 37 · Sep 12 – Sep 18, 2022Week of September 12, 2022: Uber breached via an MFA prompt, and OMB demands secure-software attestations
Week 38 · Sep 19 – Sep 25, 2022Week of September 19, 2022: Iran's Albania Wiper Attacks, Uber's Lapsus$ Breach
Week 39 · Sep 26 – Oct 2, 2022Week of September 26, 2022: Exchange Zero-Days Surface, Sophos Firewall RCE Exploited
Week 40 · Oct 3 – Oct 9, 2022Week of October 3, 2022: CISA's Asset Directive and a DIB Espionage Breach Disclosed
Week 41 · Oct 10 – Oct 16, 2022Week of October 10, 2022: Patch Tuesday Exploits and Multibillion-Dollar Security M&A
Week 42 · Oct 17 – Oct 23, 2022Week of October 17, 2022: Daixin Team Ransomware Advisory and Apache Commons Text Flaw
Week 43 · Oct 24 – Oct 30, 2022Week of October 24, 2022: Medibank says every customer's data was accessed, and OpenSSL flags a critical fix
Week 44 · Oct 31 – Nov 6, 2022Week of October 31, 2022: OpenSSL Patches Critical Flaws, Dropbox Discloses GitHub Breach
Week 45 · Nov 7 – Nov 13, 2022Week of November 7, 2022: Medibank's Ransom Refusal and a Zero-Day-Heavy Patch Tuesday
Week 46 · Nov 14 – Nov 20, 2022Week of November 14, 2022: Hive Ransomware Advisory and Iranian APT Federal Breach
Week 47 · Nov 21 – Nov 27, 2022Week of November 21, 2022: CISA's KEV Update and the Hive Ransomware Advisory
Week 48 · Nov 28 – Dec 4, 2022Week of November 28, 2022: Cuba Ransomware Advisory and CISA ICS/KEV Alerts
Week 49 · Dec 5 – Dec 11, 2022Week of December 5, 2022: Rackspace ties its Exchange outage to ransomware, and Apple expands iCloud E2EE
Week 50 · Dec 12 – Dec 18, 2022Week of December 12, 2022: FortiOS Zero-Day, Citrix ADC State-Sponsored Exploit
Week 51 · Dec 19 – Dec 25, 2022Week of December 19, 2022: LastPass Confirms Vault Theft, New Exchange Exploit Chain Surfaces
Week 52 · Dec 26 – Jan 1, 2023Week of December 26, 2022: LastPass Fallout and CPRA Takes Effect