Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Vendor news

What happened to security vendors

Which Daily CISO items were about the companies that sell security products? These 554 items from the daily briefings and the weekly archive cover 107 vendors: deals, exploited flaws in their products, and incidents they disclosed, newest month first.

Updated

Each headline links to the item on this site. Each company name opens its page here: the vendor’s entries in CISA’s Known Exploited Vulnerabilities catalog and every Daily CISO item about it. The company’s one record, with what it sells and who owns it, is on CISO Tribune’s vendor directory, linked from each page.

An item is listed when the vendor is named in its headline, is the subject of the disclosure, or makes the affected product; passing mentions are left out. Vendor list as of November 8, 2026.

In the CISA KEV catalog · 34 vendors

Directory vendors with at least one entry in CISA’s Known Exploited Vulnerabilities catalog (version 2026.11.06, snapshot November 7, 2026), most entries first. Each page lists the vendor’s entries newest first with CISA’s date added and due date; the whole catalog is counted on the KEV tracker.

November 2026 · 15 items

  1. Daily briefing · November 8, 2026

    CISA Adds Actively Exploited SonicWall SSLVPN Flaw to KEV Catalog

  2. Daily briefing · November 8, 2026

    Checkmarx Names Kobi Sivilya as CISO and CIO
    • Checkmarx · Static application security testing

  3. Daily briefing · November 7, 2026

    CISA Adds Actively Exploited SonicWall SSLVPN Flaw to KEV

  4. Daily briefing · November 6, 2026

    Keyfactor names Gerald Beuchelt as Chief Information Security Officer

  5. Daily briefing · November 5, 2026

    CISA Orders Federal Patch for Exploited Ivanti Connect Secure Flaws
    • Ivanti · Endpoint management and application control

  6. Daily briefing · November 4, 2026

    CISA Orders Agencies to Patch Exploited Ivanti Connect Secure Flaws
    • Ivanti · Endpoint management and application control

  7. Daily briefing · November 4, 2026

    Check Point Names Ex-Fidelity CISO Adam Ely Chief Business Officer

  8. Daily briefing · November 4, 2026

    Attackers Exploit Critical Node-RED Flaw to Backdoor Siemens ICS Devices

  9. Daily briefing · November 3, 2026

    CISA sets patch deadlines for exploited Ivanti Connect Secure flaws
    • Ivanti · Endpoint management and application control

  10. Daily briefing · November 2, 2026

    CISA Adds Two Actively Exploited Ivanti Connect Secure Flaws to KEV
    • Ivanti · Endpoint management and application control

  11. Daily briefing · November 2, 2026

    CISA Confirms Active Exploitation of Max-Severity GitLab Flaw
    • GitLab · Static application security testing

  12. Daily briefing · November 2, 2026

    Cisco Talos: Fake IT Help Desk Calls Fueled Ransomware and Credential Theft
    • Cisco · Firewalls and NGFW

  13. Daily briefing · November 2, 2026

    Gigamon Names Grant Yacomeni as Chief Information Security Officer
    • Gigamon · Network visibility and traffic brokering

  14. Daily briefing · November 1, 2026

    CISA Adds Two Actively Exploited Ivanti Connect Secure Flaws to KEV Catalog
    • Ivanti · Endpoint management and application control

  15. Daily briefing · November 1, 2026

    Gigamon Names Grant Yacomeni as Chief Information Security Officer
    • Gigamon · Network visibility and traffic brokering

October 2026 · 64 items

  1. Daily briefing · October 31, 2026

    CISA adds actively exploited Ivanti Connect Secure flaws to KEV catalog
    • Ivanti · Endpoint management and application control

  2. Daily briefing · October 31, 2026

    Chinese actors chained VMware ESX and Linux zero-days to root firewalls

  3. Daily briefing · October 30, 2026

    Chinese Actors Exploit VMware ESX Zero-Day and Chain Flaws to Root Firewalls

  4. Daily briefing · October 29, 2026

    CISA adds VMware ESX and Linux Kernel flaws to exploited-vulnerability catalog

  5. Daily briefing · October 28, 2026

    Fortinet Patches Critical FortiOS Flaws, Withholds Details Until November 10

  6. Daily briefing · October 27, 2026

    Fortinet Ships Critical FortiOS Hardening Updates, Details Delayed to Nov. 10

  7. Daily briefing · October 27, 2026

    Patched Microsoft Authenticator Flaw Let Rogue Apps Steal Work Tokens

  8. Daily briefing · October 26, 2026

    ConnectWise suspends Cloud Backup service after Microsoft 365 access abuse

  9. Daily briefing · October 26, 2026

    Huntress tracks token-theft campaign that hit Microsoft 365 accounts at 79 orgs

  10. Weekly archive · Oct 26 – Nov 1, 2026

    CISA Adds Two Actively Exploited Ivanti Connect Secure Flaws to KEV
    • Ivanti · Endpoint management and application control

  11. Daily briefing · October 25, 2026

    Token-Replay Campaign Compromised Microsoft 365 Accounts at 79 Organizations

  12. Daily briefing · October 24, 2026

    CISA reinforces urgent patching for critical php2shell PHP flaws

  13. Daily briefing · October 23, 2026

    CISA Adds Six Actively Exploited Flaws to KEV Catalog

  14. Daily briefing · October 22, 2026

    ConnectWise Suspends Cloud Backup After Microsoft 365 Credential Abuse

  15. Daily briefing · October 22, 2026

    CISA Adds Six Actively Exploited Vulnerabilities to KEV Catalog

  16. Daily briefing · October 21, 2026

    ConnectWise Suspends Cloud Backup After Attackers Abuse Microsoft 365 Access

  17. Daily briefing · October 20, 2026

    ConnectWise suspends Cloud Backup after attackers abuse its Microsoft 365 access

  18. Daily briefing · October 20, 2026

    CISA deadline hits for exploited Palo Alto, Cisco and Ahsay flaws; Ivanti chain also active
    • Cisco · Firewalls and NGFW
    • Ivanti · Endpoint management and application control
    • Microsoft · EDR and XDR

  19. Daily briefing · October 19, 2026

    CISA: Attackers Actively Exploiting BeyondTrust Remote Support Flaw

  20. Daily briefing · October 19, 2026

    CISA Adds Exploited Fortinet Path Traversal Bug to KEV Catalog

  21. Weekly archive · Oct 19 – Oct 25, 2026

    CISA Catalogs Six Actively Exploited Flaws Spanning Plex and Siemens

  22. Weekly archive · Oct 19 – Oct 25, 2026

    CISA, Canadian Cyber Centre Issue AI Token Consumption Guidance
    • Token · Passwordless authentication and authenticators

  23. Daily briefing · October 18, 2026

    CISA urges emergency patching of critical BeyondTrust Remote Support flaw

  24. Daily briefing · October 18, 2026

    CISA KEV catalog grows with exploited Palo Alto, Cisco and Ahsay flaws
    • Cisco · Firewalls and NGFW

  25. Daily briefing · October 18, 2026

    Microsoft dismantles YAM Store phishing network behind a billion scam messages

  26. Daily briefing · October 17, 2026

    CISA Orders Urgent Patching for Exploited BeyondTrust Remote Support Flaw

  27. Daily briefing · October 17, 2026

    CISA Catalogs Four More Exploited Flaws in Palo Alto, Cisco, Ahsay Products
    • Cisco · Firewalls and NGFW

  28. Daily briefing · October 17, 2026

    Attackers Chain Three Ivanti Zero-Days to Gain Root on Patched VPNs
    • Ivanti · Endpoint management and application control

  29. Daily briefing · October 17, 2026

    Microsoft Patches Exploited Windows Shell Zero-Day Among Record Bug Haul

  30. Daily briefing · October 17, 2026

    Acronis Names Gerald Caron Chief Information Security Officer
    • Acronis · Backup and cyber recovery

  31. Daily briefing · October 16, 2026

    Attackers Exploit Ivanti Connect Secure Zero-Day, CISA Orders Immediate Patching
    • Ivanti · Endpoint management and application control

  32. Daily briefing · October 16, 2026

    CISA Flags Actively Exploited Flaws in Palo Alto, Cisco and Ahsay Products
    • Cisco · Firewalls and NGFW

  33. Daily briefing · October 16, 2026

    Microsoft's Record Patch Tuesday Fixes Exploited Windows Shell Flaw

  34. Daily briefing · October 16, 2026

    Nike Names Former CrowdStrike Executive Adam Zoller as CISO

  35. Daily briefing · October 16, 2026

    GitLab Patches Maximum-Severity CVSS 10.0 RCE in CI/CD Regex Compiler
    • GitLab · Static application security testing

  36. Daily briefing · October 15, 2026

    CISA urges emergency patching of exploited Ivanti Connect Secure zero-day
    • Ivanti · Endpoint management and application control

  37. Daily briefing · October 15, 2026

    CISA adds four more exploited flaws, including Palo Alto and Cisco products, to KEV catalog
    • Cisco · Firewalls and NGFW

  38. Daily briefing · October 15, 2026

    GitLab patches maximum-severity CI/CD regex RCE flaw
    • GitLab · Static application security testing

  39. Daily briefing · October 15, 2026

    Nike names former CrowdStrike CISO Adam Zoller to top security role

  40. Daily briefing · October 14, 2026

    CISA Warns of Actively Exploited Ivanti Connect Secure Zero-Day
    • Ivanti · Endpoint management and application control

  41. Daily briefing · October 14, 2026

    Acronis Appoints Gerald Caron as Chief Information Security Officer
    • Acronis · Backup and cyber recovery

  42. Daily briefing · October 13, 2026

    SonicWall patches pre-auth SSRF flaw letting attackers reach internal appliance functions

  43. Weekly archive · Oct 12 – Oct 18, 2026

    CISA Flags Actively Exploited BeyondTrust Remote Support Flaw

  44. Weekly archive · Oct 12 – Oct 18, 2026

    Ivanti Connect Secure Exploitation Prompts KEV Addition
    • Ivanti · Endpoint management and application control

  45. Weekly archive · Oct 12 – Oct 18, 2026

    CISA Adds Four More Exploited Vulnerabilities to KEV Catalog

  46. Weekly archive · Oct 12 – Oct 18, 2026

    CISO Moves: Pega, Nike, and Accenture Federal Services Make Appointments
    • Accenture · Security consulting and advisory

  47. Daily briefing · October 10, 2026

    FortiBleed campaign still active, locking admins out of Fortinet firewalls

  48. Daily briefing · October 10, 2026

    SonicWall patches pre-auth SSRF flaw in SMA 1000 VPN appliances

  49. Daily briefing · October 9, 2026

    FBI, Secret Service: FortiBleed campaign still locking out Fortinet admins

  50. Daily briefing · October 9, 2026

    SonicWall patches critical pre-auth SSRF flaw in SMA 1000 appliances

  51. Daily briefing · October 9, 2026

    Accenture Federal Services names Nathaniel Parker as CISO
    • Accenture · Security consulting and advisory

  52. Daily briefing · October 7, 2026

    Microsoft rushes out-of-band Exchange Server fix for mailbox access bug

  53. Daily briefing · October 7, 2026

    Former SolarWinds CISO Tim Brown named Chief Strategy Officer at Cytactic
    • SolarWinds · Network visibility and traffic brokering

  54. Daily briefing · October 6, 2026

    Microsoft Ships Out-of-Band Patch for High-Severity Exchange Server Bug

  55. Daily briefing · October 5, 2026

    Critical FortiMail zero-day under active exploitation

  56. Daily briefing · October 5, 2026

    Microsoft rushes out-of-band fix for Exchange Server mailbox flaw

  57. Weekly archive · Oct 5 – Oct 11, 2026

    FortiBleed Campaign Still Active, Locking Admins Out of Fortinet Gear

  58. Daily briefing · October 4, 2026

    Critical FortiMail zero-day under active exploitation, patch pending

  59. Daily briefing · October 4, 2026

    Cisco's fifth SD-WAN zero-day of the year exploited in the wild
    • Cisco · Firewalls and NGFW

  60. Daily briefing · October 4, 2026

    Microsoft: AI is shrinking the gap between bug discovery and exploitation

  61. Daily briefing · October 3, 2026

    CISA adds Cisco SD-WAN Manager zero-day to KEV catalog
    • Cisco · Firewalls and NGFW

  62. Daily briefing · October 2, 2026

    CISA Flags Actively Exploited FortiMail Path Traversal Bug

  63. Daily briefing · October 2, 2026

    Cisco Catalyst SD-WAN Manager Flaw Joins CISA's Exploited Vulnerability List
    • Cisco · Firewalls and NGFW

  64. Daily briefing · October 1, 2026

    CISA adds actively exploited Cisco Catalyst SD-WAN Manager bug to KEV catalog
    • Cisco · Firewalls and NGFW

September 2026 · 8 items

  1. Daily briefing · September 29, 2026

    Teen researcher's Microsoft Titan bug exposed employee and Bing data

  2. Daily briefing · September 28, 2026

    Teen researcher finds unverified login tokens exposed Microsoft's internal Titan service

  3. Daily briefing · September 27, 2026

    Check Point management servers were exploited for two months before a fix

  4. Daily briefing · September 27, 2026

    Six more exploited flaws on CISA's KEV list, including F5 and SharePoint

  5. Weekly archive · Sep 14 – Sep 20, 2026

    Cisco patches Secure Email Gateway zero-day under active exploitation
    • Cisco · Firewalls and NGFW

  6. Weekly archive · Sep 14 – Sep 20, 2026

    ParaShells flaw in Parallels Desktop allows root escalation on Macs
    • JFrog · Software supply chain security

  7. Weekly archive · Sep 14 – Sep 20, 2026

    Acronis Backup plugin flaw exploited against cPanel and WHM servers
    • Acronis · Backup and cyber recovery

  8. Weekly archive · Sep 7 – Sep 13, 2026

    Cisco Secure Firewall Management Center flaws exploited by state and ransomware actors
    • Cisco · Firewalls and NGFW

August 2026 · 5 items

  1. Weekly archive · Aug 31 – Sep 6, 2026

    SonicWall Confirms Active Exploitation of SMA 1000 Zero-Days

  2. Weekly archive · Aug 17 – Aug 23, 2026

    CISA Adds Four Actively Exploited Flaws Including Microsoft and VMware Bugs

  3. Weekly archive · Aug 17 – Aug 23, 2026

    NSA, CISA, FBI Warn of Active AI-Assisted Attacks on Siemens S7 PLCs

  4. Weekly archive · Aug 10 – Aug 16, 2026

    Attackers knock Cisco firewalls offline with an unauthenticated request
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Aug 3 – Aug 9, 2026

    CISA Flags Three Actively Exploited Bugs in Langflow, N-able, and Tomcat
    • IBM · Data security posture management

July 2026 · 9 items

  1. Weekly archive · Jul 27 – Aug 2, 2026

    CISA Adds Cisco Firewall Flaw to Exploited Vulnerabilities List
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Jul 27 – Aug 2, 2026

    CISA Flags Fortinet and Arista Flaws as Actively Exploited

  3. Weekly archive · Jul 20 – Jul 26, 2026

    CISA Adds Check Point and SharePoint Flaws to KEV Catalog

  4. Weekly archive · Jul 20 – Jul 26, 2026

    Iran-Affiliated PLC Targeting Advisory Updated to Add Schneider, Siemens

  5. Weekly archive · Jul 13 – Jul 19, 2026

    SonicWall patches SMA 1000 zero-days under active attack

  6. Weekly archive · Jul 13 – Jul 19, 2026

    CISA adds SharePoint and FortiSandbox flaws to KEV catalog

  7. Weekly archive · Jul 6 – Jul 12, 2026

    Accenture Confirms Security Incident After Claimed 35GB Data Theft
    • Accenture · Security consulting and advisory

  8. Weekly archive · Jul 6 – Jul 12, 2026

    Extortion Group Abuses Fake Passkey Enrollment to Hijack Microsoft 365 Accounts

  9. Weekly archive · Jul 6 – Jul 12, 2026

    Microsoft Patches RoguePlanet Windows Defender Privilege Escalation Flaw

June 2026 · 9 items

  1. Weekly archive · Jun 29 – Jul 5, 2026

    Exploited SharePoint Server deserialization flaw joins the KEV list

  2. Weekly archive · Jun 22 – Jun 28, 2026

    CISA Adds Actively Exploited Cisco and PTC Flaws to KEV Catalog
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Jun 22 – Jun 28, 2026

    FortiBleed Leak Exposes Full FortiGate Attack Chain

  4. Weekly archive · Jun 15 – Jun 21, 2026

    CISA Urges Hardening of Fortinet Devices After Mass Credential Exposure

  5. Weekly archive · Jun 15 – Jun 21, 2026

    CISA Adds Exploited Cisco SD-WAN and LiteSpeed Flaws to KEV Catalog
    • Cisco · Firewalls and NGFW

  6. Weekly archive · Jun 8 – Jun 14, 2026

    Ivanti Sentry Command Injection Bug Joins CISA's KEV List
    • Ivanti · Endpoint management and application control

  7. Weekly archive · Jun 8 – Jun 14, 2026

    CISA Flags Cisco SD-WAN, Arista EOS, and Chromium V8 Flaws as Exploited
    • Cisco · Firewalls and NGFW

  8. Weekly archive · Jun 8 – Jun 14, 2026

    CISA Adds BerriAI LiteLLM and Check Point Gateway Bugs to KEV Catalog

  9. Weekly archive · Jun 1 – Jun 7, 2026

    CISA Adds SolarWinds Serv-U Flaw to Known Exploited Vulnerabilities Catalog
    • SolarWinds · Network visibility and traffic brokering

May 2026 · 8 items

  1. Weekly archive · May 25 – May 31, 2026

    CISA Adds PAN-OS Authentication Bypass to KEV Catalog

  2. Weekly archive · May 18 – May 24, 2026

    Two Microsoft Defender flaws are exploited in the wild

  3. Weekly archive · May 11 – May 17, 2026

    CISA adds Microsoft Exchange XSS flaw to Known Exploited Vulnerabilities Catalog

  4. Weekly archive · May 11 – May 17, 2026

    CISA adds Cisco Catalyst SD-WAN Controller bypass flaw to KEV Catalog
    • Cisco · Firewalls and NGFW

  5. Weekly archive · May 11 – May 17, 2026

    Microsoft's May 2026 Patch Tuesday fixes 120+ CVEs, none actively exploited

  6. Weekly archive · May 4 – May 10, 2026

    Palo Alto says nation-state actors likely behind PAN-OS firewall zero-day

  7. Weekly archive · May 4 – May 10, 2026

    DigiCert discloses breach that enabled rogue EV code-signing certificates

  8. Weekly archive · May 4 – May 10, 2026

    Microsoft details AiTM phishing campaign using fake compliance notices

April 2026 · 7 items

  1. Weekly archive · Apr 27 – May 3, 2026

    CISA, Microsoft Warn of Active Exploitation of Windows Shell Flaw

  2. Weekly archive · Apr 20 – Apr 26, 2026

    CISA Adds Eight Vulnerabilities to KEV Catalog
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Apr 20 – Apr 26, 2026

    CISA Adds Microsoft Defender Flaw to KEV Catalog

  4. Weekly archive · Apr 20 – Apr 26, 2026

    CISA and NCSC-UK Detail FIRESTARTER Backdoor on Cisco Firewalls
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Apr 20 – Apr 26, 2026

    Security Leadership Moves at Point Wild, Oasis Security, Claroty

  6. Weekly archive · Apr 13 – Apr 19, 2026

    CISA Adds Seven Vulnerabilities to Known Exploited Vulnerabilities Catalog

  7. Weekly archive · Apr 13 – Apr 19, 2026

    Fortinet Patches Critical FortiSandbox Vulnerabilities

March 2026 · 9 items

  1. Weekly archive · Mar 30 – Apr 5, 2026

    Critical FortiClient EMS SQL injection flaw under active attack

  2. Weekly archive · Mar 16 – Mar 22, 2026

    CISA Adds Cisco Firewall Management Flaw to KEV Catalog
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Mar 16 – Mar 22, 2026

    CISA Adds Microsoft SharePoint Flaw to KEV Catalog

  4. Weekly archive · Mar 9 – Mar 15, 2026

    Microsoft's March 2026 Patch Tuesday Fixes 80+ Flaws, Six Rated More Likely to Be Exploited

  5. Weekly archive · Mar 9 – Mar 15, 2026

    ESET Details Sednit's BeardShell and Covenant Espionage Toolkit Targeting Ukraine
    • ESET · Endpoint protection platforms

  6. Weekly archive · Mar 2 – Mar 8, 2026

    CISA Flags Qualcomm and Broadcom VMware Flaws as Exploited

  7. Weekly archive · Mar 2 – Mar 8, 2026

    Cisco Confirms Active Exploitation of SD-WAN Manager Flaws, Patches 48 Firewall Bugs
    • Cisco · Firewalls and NGFW

  8. Weekly archive · Mar 2 – Mar 8, 2026

    Microsoft Warns of OAuth Redirect Abuse Targeting Government Agencies

  9. Weekly archive · Mar 2 – Mar 8, 2026

    FreeScout Patch Bypass Enables Zero-Click Takeover via Malicious Email

February 2026 · 7 items

  1. Weekly archive · Feb 23 – Mar 1, 2026

    Cisco SD-WAN authentication bypass was exploited for about three years
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Feb 23 – Mar 1, 2026

    CISA issues Emergency Directive 26-03 during the DHS shutdown
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Feb 16 – Feb 22, 2026

    CISA adds Dell and GitLab flaws to Known Exploited Vulnerabilities Catalog
    • GitLab · Static application security testing

  4. Weekly archive · Feb 16 – Feb 22, 2026

    CISA flags actively exploited Chrome zero-day in KEV update

  5. Weekly archive · Feb 9 – Feb 15, 2026

    CISA Adds Six Actively Exploited Microsoft Vulnerabilities to KEV Catalog

  6. Weekly archive · Feb 9 – Feb 15, 2026

    BeyondTrust Remote Support Flaw Added to CISA's KEV List

  7. Weekly archive · Feb 2 – Feb 8, 2026

    CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog
    • GitLab · Static application security testing
    • SolarWinds · Network visibility and traffic brokering

January 2026 · 11 items

  1. Weekly archive · Jan 26 – Feb 1, 2026

    CISA Flags Actively Exploited Ivanti EPMM Flaw
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Jan 26 – Feb 1, 2026

    Fortinet SSO Bypass Hit FortiGate Firewalls With Live Attacks

  3. Weekly archive · Jan 26 – Feb 1, 2026

    CISA Adds Fortinet Authentication Bypass to KEV Catalog

  4. Weekly archive · Jan 26 – Feb 1, 2026

    ConductorOne Hires Netflix, Capital One Veteran as CISO

  5. Weekly archive · Jan 19 – Jan 25, 2026

    CISA Adds Actively Exploited Cisco Communications Flaw to KEV Catalog
    • Cisco · Firewalls and NGFW

  6. Weekly archive · Jan 19 – Jan 25, 2026

    Patched FortiGate Firewalls Keep Falling to CVE-2025-59718

  7. Weekly archive · Jan 12 – Jan 18, 2026

    Microsoft takes legal action against the RedVDS cybercrime service

  8. Weekly archive · Jan 12 – Jan 18, 2026

    Cisco patches the AsyncOS email appliance flaw exploited since November
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Jan 12 – Jan 18, 2026

    Delinea agrees to acquire StrongDM
    • Delinea · Privileged access management

  10. Weekly archive · Jan 5 – Jan 11, 2026

    CISA Adds Two Flaws to KEV Catalog, Including HPE OneView Bug

  11. Weekly archive · Jan 5 – Jan 11, 2026

    PoC Published for Critical Unauthenticated RCE in Trend Micro Apex Central

December 2025 · 11 items

  1. Weekly archive · Dec 29 – Jan 4, 2026

    Trellix Survey Finds Hybrid Infrastructure Now the CISO Default

  2. Weekly archive · Dec 29 – Jan 4, 2026

    Veza Report Finds Machine Identities Outnumber Humans 17 to 1
    • Veza · Identity governance and administration

  3. Weekly archive · Dec 22 – Dec 28, 2025

    WatchGuard Firebox Firewalls Face Active Exploitation

  4. Weekly archive · Dec 22 – Dec 28, 2025

    NIST and CISA Open Comment Period on Token Protection Guidance
    • Token · Passwordless authentication and authenticators

  5. Weekly archive · Dec 22 – Dec 28, 2025

    ServiceNow to Acquire Armis for $7.75 Billion
    • Armis · IoT and medical device security
    • ServiceNow · GRC and integrated risk platforms

  6. Weekly archive · Dec 22 – Dec 28, 2025

    Nissan Discloses Impact From Red Hat GitLab Breach
    • GitLab · Static application security testing
    • Red Hat · Software supply chain security

  7. Weekly archive · Dec 15 – Dec 21, 2025

    CISA Adds Cisco, SonicWall, and ASUS Flaws to Exploited Vulnerabilities Catalog

  8. Weekly archive · Dec 15 – Dec 21, 2025

    Unpatched Cisco Email Security Flaw Used to Install Backdoors
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Dec 8 – Dec 14, 2025

    CISA Adds WinRAR and Windows Flaws to Exploited Vulnerabilities List

  10. Weekly archive · Dec 8 – Dec 14, 2025

    CISA, Microsoft, Opal Security and Fastly Announce Security-Leadership Moves

  11. Weekly archive · Dec 1 – Dec 7, 2025

    Cloudflare's React mitigation triggers a 25-minute outage

November 2025 · 9 items

  1. Weekly archive · Nov 24 – Nov 30, 2025

    Cato Networks discloses HashJack prompt-injection flaw in AI browsers

  2. Weekly archive · Nov 17 – Nov 23, 2025

    Cloudflare Outage Disrupts Major Internet Services

  3. Weekly archive · Nov 17 – Nov 23, 2025

    CISA Adds Exploited Fortinet FortiWeb Flaw to KEV Catalog

  4. Weekly archive · Nov 17 – Nov 23, 2025

    Salesforce Probes Gainsight-Linked Token Compromise
    • Token · Passwordless authentication and authenticators

  5. Weekly archive · Nov 10 – Nov 16, 2025

    CISA Flags Chained FortiWeb Flaws Enabling Remote Code Execution

  6. Weekly archive · Nov 10 – Nov 16, 2025

    CISA Adds WatchGuard, Gladinet, and Microsoft Flaws to KEV Catalog

  7. Weekly archive · Nov 10 – Nov 16, 2025

    CISA Pushes Cisco ASA and Firepower Patch Verification After Compliance Gaps
    • Cisco · Firewalls and NGFW

  8. Weekly archive · Nov 3 – Nov 9, 2025

    Cisco Patches Critical UCCX Authentication Bypass and Root RCE Flaws
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Nov 3 – Nov 9, 2025

    Mandiant Ties SonicWall Cloud Backup Breach to State-Sponsored Actor

October 2025 · 12 items

  1. Weekly archive · Oct 27 – Nov 2, 2025

    XWiki and VMware Aria Flaws Added to CISA's Exploited Vulnerabilities Catalog

  2. Weekly archive · Oct 27 – Nov 2, 2025

    Kaspersky Links Italian Dante Spyware to Chrome Zero-Day Campaign

  3. Weekly archive · Oct 20 – Oct 26, 2025

    Microsoft reissues its WSUS fix as exploitation begins

  4. Weekly archive · Oct 20 – Oct 26, 2025

    Veeam agrees to buy Securiti AI for $1.725 billion
    • Securiti · Data security posture management
    • Veeam · Backup and cyber recovery

  5. Weekly archive · Oct 13 – Oct 19, 2025

    F5 Discloses Nation-State Breach of BIG-IP Development Systems
    • F5 · WAF and WAAP

  6. Weekly archive · Oct 13 – Oct 19, 2025

    CISA Issues Emergency Directive 26-01 for F5 Devices
    • F5 · WAF and WAAP

  7. Weekly archive · Oct 13 – Oct 19, 2025

    CISA Adds Five More Vulnerabilities to KEV Catalog

  8. Weekly archive · Oct 13 – Oct 19, 2025

    CISA Releases Rockwell Automation EtherNet/IP Advisory

  9. Weekly archive · Oct 13 – Oct 19, 2025

    RAD Security Names Raj Umadas as CISO

  10. Weekly archive · Oct 6 – Oct 12, 2025

    CISA Issues Four ICS Advisories Covering Hitachi Energy, Rockwell Automation, Mitsubishi Electric

  11. Weekly archive · Oct 6 – Oct 12, 2025

    CISA Publishes Two ICS Advisories for Delta Electronics and Rockwell Automation

  12. Weekly archive · Oct 6 – Oct 12, 2025

    Security Leadership Shuffles: Exabeam Names New CEO, Sophos Adds Chief Legal Officer

September 2025 · 13 items

  1. Weekly archive · Sep 29 – Oct 5, 2025

    CISA Adds Five Vulnerabilities to KEV Catalog
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Sep 29 – Oct 5, 2025

    Akira Ransomware Hit SonicWall VPN Victims in Under Four Hours

  3. Weekly archive · Sep 29 – Oct 5, 2025

    Crimson Collective Claims Breach of Red Hat Consulting GitLab
    • GitLab · Static application security testing
    • Red Hat · Software supply chain security

  4. Weekly archive · Sep 29 – Oct 5, 2025

    Tens of Thousands of Cisco ASA Devices Remained Unpatched
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Sep 22 – Sep 28, 2025

    CISA Orders Emergency Mitigation of Cisco ASA and Firepower Zero-Days
    • Cisco · Firewalls and NGFW

  6. Weekly archive · Sep 22 – Sep 28, 2025

    SonicWall Discloses MySonicWall Cloud Backup Incident

  7. Weekly archive · Sep 15 – Sep 21, 2025

    CISA Details Malicious Listener Malware Targeting Ivanti EPMM
    • Ivanti · Endpoint management and application control

  8. Weekly archive · Sep 15 – Sep 21, 2025

    CISA Issues Eight ICS Advisories Covering Schneider, Siemens, Hitachi

  9. Weekly archive · Sep 15 – Sep 21, 2025

    SonicWall Discloses Brute-Force Breach of Firewall Backup Files

  10. Weekly archive · Sep 15 – Sep 21, 2025

    Microsoft and Cloudflare Disrupt RaccoonO365 Phishing-as-a-Service

  11. Weekly archive · Sep 8 – Sep 14, 2025

    Akira affiliates chain an old SonicWall bug with two configuration gaps

  12. Weekly archive · Sep 8 – Sep 14, 2025

    September Patch Tuesday brings 80-plus Microsoft fixes, none exploited

  13. Weekly archive · Sep 1 – Sep 7, 2025

    Mimecast, D-Wave Quantum Name New CISOs

August 2025 · 7 items

  1. Weekly archive · Aug 25 – Aug 31, 2025

    TransUnion Notifies 4.4 Million After Third-Party Application Breach

  2. Weekly archive · Aug 25 – Aug 31, 2025

    Mimecast Names Leslie Nielsen Chief Information Security Officer

  3. Weekly archive · Aug 18 – Aug 24, 2025

    Commvault Patches Four Flaws Enabling Remote Code Execution

  4. Weekly archive · Aug 11 – Aug 17, 2025

    CISA Releases 32 ICS Advisories Spanning Siemens and Rockwell Lines

  5. Weekly archive · Aug 11 – Aug 17, 2025

    WinRAR and Decades-Old Microsoft Bugs Added to KEV Catalog

  6. Weekly archive · Aug 4 – Aug 10, 2025

    CISA Details Mitigation Steps for Exchange Hybrid Vulnerability

  7. Weekly archive · Aug 4 – Aug 10, 2025

    CISA Publishes Malware Analysis on SharePoint ToolShell Exploit Chain

July 2025 · 9 items

  1. Weekly archive · Jul 28 – Aug 3, 2025

    Palo Alto Networks agrees to buy CyberArk for about $25 billion

  2. Weekly archive · Jul 28 – Aug 3, 2025

    Cisco ISE injection flaws and an old PaperCut bug go on the KEV list
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Jul 21 – Jul 27, 2025

    Microsoft Ties SharePoint Attacks to Chinese State Actors, Flags Ransomware Deployment

  4. Weekly archive · Jul 21 – Jul 27, 2025

    CISA Adds Exploited SharePoint Flaws to KEV Catalog

  5. Weekly archive · Jul 21 – Jul 27, 2025

    Cisco Confirms Exploitation of Maximum-Severity ISE Flaws
    • Cisco · Firewalls and NGFW

  6. Weekly archive · Jul 21 – Jul 27, 2025

    SonicWall Patches Critical SMA Appliance Flaw, Urges Compromise Checks

  7. Weekly archive · Jul 14 – Jul 20, 2025

    Persistent OVERSTEP backdoor found on end-of-life SonicWall SMA appliances

  8. Weekly archive · Jul 7 – Jul 13, 2025

    CISA Publishes Thirteen ICS Advisories Covering Siemens, Delta Electronics, and More

  9. Weekly archive · Jul 7 – Jul 13, 2025

    AttackIQ Names Field CISO as Silobreaker Hands CEO Role to Former NYC Cyber Command Chief
    • AttackIQ · Exposure prioritisation and CTEM

June 2025 · 6 items

  1. Weekly archive · Jun 30 – Jul 6, 2025

    Microsoft's Longtime CISO Bret Arsenault Steps Back After 35 Years

  2. Weekly archive · Jun 23 – Jun 29, 2025

    CISA Adds Three Actively Exploited Flaws to KEV Catalog

  3. Weekly archive · Jun 23 – Jun 29, 2025

    SonicWall Warns of Trojanized NetExtender VPN Installer Stealing Credentials

  4. Weekly archive · Jun 23 – Jun 29, 2025

    SecurityScorecard Uncovers LapDogs Backdoor Network in SOHO Devices

  5. Weekly archive · Jun 16 – Jun 22, 2025

    Qualys chains two Linux flaws to reach root on most distributions
    • Qualys · Vulnerability management

  6. Weekly archive · Jun 9 – Jun 15, 2025

    Upwind, SecurityBridge and SimSpace Name New Security and Revenue Executives
    • Upwind · Cloud-native application protection (CNAPP)

May 2025 · 10 items

  1. Weekly archive · May 26 – Jun 1, 2025

    CISA Issues Five ICS Advisories

  2. Weekly archive · May 26 – Jun 1, 2025

    Dutch Agencies and Microsoft Expose Laundry Bear Espionage Group

  3. Weekly archive · May 26 – Jun 1, 2025

    DragonForce Ransomware Delivered to MSP Clients via SimpleHelp

  4. Weekly archive · May 19 – May 25, 2025

    CISA Adds Six Vulnerabilities to Known Exploited Catalog
    • Ivanti · Endpoint management and application control

  5. Weekly archive · May 19 – May 25, 2025

    CISA Details Threat Activity Against Commvault's Metallic SaaS Backup

  6. Weekly archive · May 19 – May 25, 2025

    CISA and Allies Warn of Russian GRU Targeting Logistics and Tech Firms
    • BSI · Security consulting and advisory

  7. Weekly archive · May 12 – May 18, 2025

    CISA Adds Exploited Fortinet Buffer Overflow Flaw to KEV Catalog

  8. Weekly archive · May 12 – May 18, 2025

    CISA Flags Five Actively Exploited Windows Vulnerabilities

  9. Weekly archive · May 12 – May 18, 2025

    Keeper Security Names Shane Barney as CISO

  10. Weekly archive · May 5 – May 11, 2025

    SonicWall SMA100 flaws chain to root, and one may be exploited

April 2025 · 5 items

  1. Weekly archive · Apr 28 – May 4, 2025

    CISA Flags Three More Actively Exploited Vulnerabilities

  2. Weekly archive · Apr 28 – May 4, 2025

    Apache HTTP Server and SonicWall Flaws Added to KEV List

  3. Weekly archive · Apr 21 – Apr 27, 2025

    Security Leadership Moves: F5, Palo Alto Networks, Vaultree

  4. Weekly archive · Apr 14 – Apr 20, 2025

    Windows NTLM hash leak flaw exploited in Poland and Romania

  5. Weekly archive · Apr 7 – Apr 13, 2025

    Fortinet warns of post-exploitation technique abusing patched FortiGate flaws

March 2025 · 13 items

  1. Weekly archive · Mar 31 – Apr 6, 2025

    ESET and Commvault Name New Security Executives
    • Commvault · Backup and cyber recovery
    • ESET · Endpoint protection platforms

  2. Weekly archive · Mar 31 – Apr 6, 2025

    Ivanti Patches Actively Exploited Connect Secure Flaw
    • Ivanti · Endpoint management and application control

  3. Weekly archive · Mar 31 – Apr 6, 2025

    Cisco Smart Licensing Utility Flaw Added to KEV Catalog
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Mar 24 – Mar 30, 2025

    IngressNightmare flaws put Kubernetes clusters at risk of takeover
    • Wiz · Cloud-native application protection (CNAPP)

  5. Weekly archive · Mar 24 – Mar 30, 2025

    CISA analyzes RESURGE malware on Ivanti Connect Secure appliances
    • Ivanti · Endpoint management and application control

  6. Weekly archive · Mar 17 – Mar 23, 2025

    CISA Adds Fortinet and GitHub Action Flaws to KEV Catalog

  7. Weekly archive · Mar 17 – Mar 23, 2025

    Five More ICS Advisories Target Schneider, Siemens, SMA Equipment

  8. Weekly archive · Mar 17 – Mar 23, 2025

    CISO Moves: Congressional Budget Office, Life360, Forcepoint Name New Security Chiefs

  9. Weekly archive · Mar 10 – Mar 16, 2025

    CISA Adds Six Windows Flaws to Known Exploited Vulnerabilities Catalog

  10. Weekly archive · Mar 10 – Mar 16, 2025

    CISA Issues Thirteen ICS Advisories Covering Siemens and Other Products

  11. Weekly archive · Mar 10 – Mar 16, 2025

    Absolute Security Names Harold Rivas Chief Information Security Officer

  12. Weekly archive · Mar 3 – Mar 9, 2025

    CISA Flags Five Actively Exploited Vulnerabilities, Including Cisco Routers
    • Cisco · Firewalls and NGFW

  13. Weekly archive · Mar 3 – Mar 9, 2025

    CISA Adds VMware ESXi Flaws to Exploited Vulnerabilities List
    • VMware · Cloud workload protection

February 2025 · 12 items

  1. Weekly archive · Feb 24 – Mar 2, 2025

    CISA Flags Microsoft Partner Center and Zimbra Flaws as Actively Exploited

  2. Weekly archive · Feb 24 – Mar 2, 2025

    Botnet of 130,000 Devices Targets Microsoft 365 Accounts

  3. Weekly archive · Feb 24 – Mar 2, 2025

    Open Redirect Flaw Found in Siemens Teamcenter Single Sign-On

  4. Weekly archive · Feb 17 – Feb 23, 2025

    CISA, FBI, MS-ISAC Issue Ghost (Cring) Ransomware Advisory

  5. Weekly archive · Feb 17 – Feb 23, 2025

    CISA Adds Palo Alto and SonicWall Flaws to Known Exploited Vulnerabilities Catalog

  6. Weekly archive · Feb 17 – Feb 23, 2025

    CISA Flags Craft CMS and a Second PAN-OS Bug as Actively Exploited

  7. Weekly archive · Feb 17 – Feb 23, 2025

    Microsoft Power Pages Flaw Added to CISA Exploited Vulnerabilities List

  8. Weekly archive · Feb 17 – Feb 23, 2025

    CISA Publishes Seven ICS Advisories Covering ABB, Siemens, Mitsubishi Electric

  9. Weekly archive · Feb 17 – Feb 23, 2025

    CISA Issues Two ICS Advisories for Delta Electronics and Rockwell Automation

  10. Weekly archive · Feb 10 – Feb 16, 2025

    Microsoft profiles a Sandworm subgroup that builds persistent access

  11. Weekly archive · Feb 10 – Feb 16, 2025

    PAN-OS authentication bypass fixed as a proof of concept goes public

  12. Weekly archive · Feb 3 – Feb 9, 2025

    CISA Catalogs Five More Exploited Flaws, Including Microsoft Outlook Bug

January 2025 · 12 items

  1. Weekly archive · Jan 27 – Feb 2, 2025

    CISA Adds Actively Exploited Apple Flaw to KEV Catalog

  2. Weekly archive · Jan 27 – Feb 2, 2025

    Thousands of SonicWall Firewalls Remain Exposed to Exploitable Flaw

  3. Weekly archive · Jan 20 – Jan 26, 2025

    CISA and FBI Detail Ivanti Cloud Service Exploitation Chain
    • Ivanti · Endpoint management and application control

  4. Weekly archive · Jan 20 – Jan 26, 2025

    CISA Adds SonicWall SMA1000 Flaw to KEV Catalog

  5. Weekly archive · Jan 20 – Jan 26, 2025

    CISA Issues Three ICS Advisories for TCAS II, Siemens, ZF

  6. Weekly archive · Jan 20 – Jan 26, 2025

    Cyberhaven, Trellix, Abnormal Security Announce New Security Leadership

  7. Weekly archive · Jan 13 – Jan 19, 2025

    Fortinet fixes a FortiOS zero-day used against exposed firewalls

  8. Weekly archive · Jan 13 – Jan 19, 2025

    Configs and credentials for 15,000 FortiGates leaked

  9. Weekly archive · Jan 13 – Jan 19, 2025

    Nominet becomes the first named victim of an Ivanti Connect Secure zero-day
    • Ivanti · Endpoint management and application control

  10. Weekly archive · Jan 6 – Jan 12, 2025

    Treasury Confirmed Sole Agency Hit in BeyondTrust Compromise

  11. Weekly archive · Jan 6 – Jan 12, 2025

    Ivanti Connect Secure Zero-Day Added to CISA's KEV Catalog
    • Ivanti · Endpoint management and application control

  12. Weekly archive · Jan 6 – Jan 12, 2025

    Mandiant Traces Ivanti VPN Zero-Day Exploitation to Mid-December
    • Ivanti · Endpoint management and application control

December 2024 · 8 items

  1. Weekly archive · Dec 30 – Jan 5, 2025

    Treasury says Chinese state hackers got in through BeyondTrust

  2. Weekly archive · Dec 30 – Jan 5, 2025

    PAN-OS DNS denial-of-service bug added to the KEV catalog

  3. Weekly archive · Dec 23 – Dec 29, 2024

    Lookout Report: iOS Devices Targeted More by Phishing Than Android in Q3 2024

  4. Weekly archive · Dec 16 – Dec 22, 2024

    CISA Adds Exploited BeyondTrust Flaw to KEV Catalog

  5. Weekly archive · Dec 16 – Dec 22, 2024

    Fortinet Fixes Takeover Flaw in FortiManager

  6. Weekly archive · Dec 16 – Dec 22, 2024

    Arctic Wolf to Acquire BlackBerry's Cylance Endpoint Business for $160 Million

  7. Weekly archive · Dec 9 – Dec 15, 2024

    Microsoft Patched Exploited Windows CLFS Zero-Day

  8. Weekly archive · Dec 2 – Dec 8, 2024

    Cisco Patches NX-OS Image Verification Bypass Flaw
    • Cisco · Firewalls and NGFW

November 2024 · 11 items

  1. Weekly archive · Nov 25 – Dec 1, 2024

    Researchers Disclose RCE Flaws in Palo Alto and SonicWall VPN Clients

  2. Weekly archive · Nov 25 – Dec 1, 2024

    ESET Finds First UEFI Bootkit Targeting Linux Systems
    • ESET · Endpoint protection platforms

  3. Weekly archive · Nov 18 – Nov 24, 2024

    Two exploited PAN-OS zero-days lead to about 2,000 compromised firewalls

  4. Weekly archive · Nov 18 – Nov 24, 2024

    Microsoft's Windows Resiliency Initiative targets kernel-mode security tools

  5. Weekly archive · Nov 11 – Nov 17, 2024

    KPMG Names Steve Frank as Chief Information Security Officer
    • KPMG · Security consulting and advisory

  6. Weekly archive · Nov 11 – Nov 17, 2024

    CISA Adds Two Palo Alto Expedition Flaws to KEV Catalog

  7. Weekly archive · Nov 11 – Nov 17, 2024

    Palo Alto Networks Warns on Exposed Firewall Management Interfaces

  8. Weekly archive · Nov 11 – Nov 17, 2024

    CISA Adds Five More Vulnerabilities to KEV Catalog

  9. Weekly archive · Nov 11 – Nov 17, 2024

    Fortinet Patches Multiple FortiOS and Product Vulnerabilities

  10. Weekly archive · Nov 4 – Nov 10, 2024

    CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog

  11. Weekly archive · Nov 4 – Nov 10, 2024

    Idaho State University and Bugcrowd Name New CISOs
    • Bugcrowd · Bug bounty and crowdsourced testing

October 2024 · 12 items

  1. Weekly archive · Oct 28 – Nov 3, 2024

    Black Basta Affiliates Expand Phishing to Microsoft Teams

  2. Weekly archive · Oct 28 – Nov 3, 2024

    CISA Details JCDC Role in CrowdStrike Outage Response

  3. Weekly archive · Oct 28 – Nov 3, 2024

    Fortinet Updates FortiManager Guidance After Zero-Day Exploitation

  4. Weekly archive · Oct 28 – Nov 3, 2024

    Sophos Details Five-Year Fight Against China-Linked Perimeter Device Attacks

  5. Weekly archive · Oct 21 – Oct 27, 2024

    Mandiant Ties Mass FortiManager Exploitation to New UNC5820 Cluster

  6. Weekly archive · Oct 21 – Oct 27, 2024

    Cisco Ships Semiannual ASA/FMC/FTD Bundle as CISA Flags Exploited DoS Flaw
    • Cisco · Firewalls and NGFW

  7. Weekly archive · Oct 21 – Oct 27, 2024

    Broadcom Re-Patches Critical VMware vCenter RCE Flaw

  8. Weekly archive · Oct 21 – Oct 27, 2024

    Sophos to Acquire Secureworks for $859 Million

  9. Weekly archive · Oct 14 – Oct 20, 2024

    OpenAI, Keeper Security, Cequence Security Name New CISOs

  10. Weekly archive · Oct 14 – Oct 20, 2024

    CISA Adds Actively Exploited Veeam Backup Flaw to KEV Catalog
    • Veeam · Backup and cyber recovery

  11. Weekly archive · Oct 14 – Oct 20, 2024

    CISA Flags Windows, Firefox, and SolarWinds Flaws as Actively Exploited
    • SolarWinds · Network visibility and traffic brokering

  12. Weekly archive · Oct 7 – Oct 13, 2024

    Fortinet and Ivanti appliance flaws added to the KEV catalog
    • Fortinet · Firewalls and NGFW
    • Ivanti · Endpoint management and application control

September 2024 · 14 items

  1. Weekly archive · Sep 30 – Oct 6, 2024

    Ivanti Endpoint Manager SQL Injection Bug Joins CISA Exploited Vulnerabilities List
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Sep 23 – Sep 29, 2024

    CISA Adds Ivanti vTM Bypass Flaw to KEV Catalog
    • Ivanti · Endpoint management and application control

  3. Weekly archive · Sep 23 – Sep 29, 2024

    Cisco Ships Semiannual IOS and IOS XE Security Bundle
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Sep 23 – Sep 29, 2024

    PoC Published for Critical SolarWinds Web Help Desk Flaw
    • SolarWinds · Network visibility and traffic brokering

  5. Weekly archive · Sep 23 – Sep 29, 2024

    German Survey: CrowdStrike Outage Reshaping Security Buying

  6. Weekly archive · Sep 16 – Sep 22, 2024

    CISA Adds Microsoft and Progress Flaws to KEV Catalog

  7. Weekly archive · Sep 16 – Sep 22, 2024

    Ivanti Patches Exploited Cloud Services Appliance Bypass
    • Ivanti · Endpoint management and application control

  8. Weekly archive · Sep 16 – Sep 22, 2024

    VMware Advisory Covers Cloud Foundation and vCenter Flaws
    • VMware · Cloud workload protection

  9. Weekly archive · Sep 9 – Sep 15, 2024

    CISA adds exploited SonicWall SonicOS flaw to KEV catalog

  10. Weekly archive · Sep 9 – Sep 15, 2024

    Microsoft's September Patch Tuesday fixes four exploited zero-days

  11. Weekly archive · Sep 9 – Sep 15, 2024

    Ivanti confirms limited exploitation of Cloud Services Appliance flaw
    • Ivanti · Endpoint management and application control

  12. Weekly archive · Sep 9 – Sep 15, 2024

    Ivanti patches maximum-severity Endpoint Manager vulnerability
    • Ivanti · Endpoint management and application control

  13. Weekly archive · Sep 9 – Sep 15, 2024

    Veeam Backup & Replication RCE flaw patched amid ransomware concerns
    • Veeam · Backup and cyber recovery

  14. Weekly archive · Sep 2 – Sep 8, 2024

    Kara Sprague Named CEO of HackerOne
    • HackerOne · Exposure prioritisation and CTEM

August 2024 · 9 items

  1. Weekly archive · Aug 26 – Sep 1, 2024

    SonicWall fixes a critical access control flaw in its firewalls

  2. Weekly archive · Aug 19 – Aug 25, 2024

    CISA Adds Versa Networks Director Flaw to KEV Catalog

  3. Weekly archive · Aug 19 – Aug 25, 2024

    SecurityWeek Tracks Florida CIO, Saviynt, TextNow and SEC-Adjacent Moves
    • Saviynt · Identity governance and administration

  4. Weekly archive · Aug 12 – Aug 18, 2024

    Skyhigh Security Names New CTO, Tenable Appoints Chief Product Officer

  5. Weekly archive · Aug 12 – Aug 18, 2024

    CISA Adds Six Actively Exploited Microsoft Vulnerabilities to KEV Catalog

  6. Weekly archive · Aug 12 – Aug 18, 2024

    SolarWinds Web Help Desk Flaw Added to CISA's Exploited Vulnerabilities List
    • SolarWinds · Network visibility and traffic brokering

  7. Weekly archive · Aug 12 – Aug 18, 2024

    Microsoft Ships August 2024 Security Updates Across Multiple Products

  8. Weekly archive · Aug 12 – Aug 18, 2024

    Ivanti Patches Avalanche, Neurons for ITSM, and Virtual Traffic Manager
    • Ivanti · Endpoint management and application control

  9. Weekly archive · Aug 5 – Aug 11, 2024

    CISA Urges Cisco Device Hardening After Smart Install Abuse
    • Cisco · Firewalls and NGFW

July 2024 · 12 items

  1. Weekly archive · Jul 29 – Aug 4, 2024

    CISA Adds Actively Exploited VMware ESXi Flaw to KEV Catalog
    • VMware · Cloud workload protection

  2. Weekly archive · Jul 29 – Aug 4, 2024

    CISA Flags ServiceNow and Acronis Bugs as Actively Exploited

  3. Weekly archive · Jul 29 – Aug 4, 2024

    DigiCert Forced Mass TLS Certificate Revocation Over DCV Compliance Gap

  4. Weekly archive · Jul 29 – Aug 4, 2024

    DDoS Attack and Defense Error Knock Azure and Microsoft 365 Offline

  5. Weekly archive · Jul 22 – Jul 28, 2024

    Check Point Names Nadav Zafrir CEO as Security Executive Moves Continue

  6. Weekly archive · Jul 15 – Jul 21, 2024

    A faulty CrowdStrike update crashes Windows hosts worldwide

  7. Weekly archive · Jul 15 – Jul 21, 2024

    Serv-U, vCenter and Adobe Commerce flaws added to the KEV catalog
    • SolarWinds · Network visibility and traffic brokering

  8. Weekly archive · Jul 8 – Jul 14, 2024

    AT&T Discloses Breach of Customer Data
    • AT&T · SASE and SSE

  9. Weekly archive · Jul 8 – Jul 14, 2024

    AT&T Breach Fallout Spreads to Snowflake
    • AT&T · SASE and SSE

  10. Weekly archive · Jul 1 – Jul 7, 2024

    CISA Adds Cisco NX-OS Flaw to Known Exploited Vulnerabilities Catalog
    • Cisco · Firewalls and NGFW

  11. Weekly archive · Jul 1 – Jul 7, 2024

    Juniper Networks Patches Denial-of-Service Flaw in Junos OS SRX Series

  12. Weekly archive · Jul 1 – Jul 7, 2024

    Tools for Humanity and Vectra AI Add Security and Privacy Executives

June 2024 · 4 items

  1. Weekly archive · Jun 17 – Jun 23, 2024

    Reco Names Merritt Baer First CISO; ARPA-H Appoints Chris Pashley
    • Reco · AI model and agent security

  2. Weekly archive · Jun 10 – Jun 16, 2024

    Cisco and Schneider Electric Name New Security Leaders
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Jun 3 – Jun 9, 2024

    Microsoft makes Windows Recall opt-in and encrypts its index

  4. Weekly archive · Jun 3 – Jun 9, 2024

    Sophos details Crimson Palace, a two-year Chinese espionage campaign

May 2024 · 5 items

  1. Weekly archive · May 27 – Jun 2, 2024

    CISA Adds Check Point and Linux Kernel Flaws to Exploited Vulnerabilities Catalog

  2. Weekly archive · May 20 – May 26, 2024

    CyberArk Agrees to Acquire Venafi for $1.54 Billion
    • CyberArk · Privileged access management

  3. Weekly archive · May 20 – May 26, 2024

    Cisco Issues Bundled Security Advisory for ASA, FMC, and FTD Software
    • Cisco · Firewalls and NGFW

  4. Weekly archive · May 13 – May 19, 2024

    Microsoft Ships May 2024 Patch Tuesday Updates

  5. Weekly archive · May 6 – May 12, 2024

    Zscaler Disputes Claims of Significant Breach After Dark-Web Listing

April 2024 · 9 items

  1. Weekly archive · Apr 29 – May 5, 2024

    CISA Adds GitLab Access-Control Flaw to KEV Catalog
    • GitLab · Static application security testing

  2. Weekly archive · Apr 29 – May 5, 2024

    CISA Lists Microsoft SmartScreen Bypass as Actively Exploited

  3. Weekly archive · Apr 29 – May 5, 2024

    SandboxAQ Hires First CISO as Security Leadership Shifts Continue

  4. Weekly archive · Apr 22 – Apr 28, 2024

    Cisco patches ArcaneDoor zero-days in ASA and Firepower firewalls
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Apr 22 – Apr 28, 2024

    Microsoft exposes GRU unit's GooseEgg Print Spooler tool

  6. Weekly archive · Apr 15 – Apr 21, 2024

    Palo Alto Networks Confirms Telemetry Mitigation Ineffective for CVE-2024-3400

  7. Weekly archive · Apr 15 – Apr 21, 2024

    Ivanti Patches Critical Avalanche Vulnerabilities
    • Ivanti · Endpoint management and application control

  8. Weekly archive · Apr 8 – Apr 14, 2024

    Palo Alto Networks PAN-OS Zero-Day Added to CISA's KEV Catalog

  9. Weekly archive · Apr 1 – Apr 7, 2024

    Ivanti Patches Four Flaws in Connect Secure and Policy Secure Gateways
    • Ivanti · Endpoint management and application control

March 2024 · 6 items

  1. Weekly archive · Mar 25 – Mar 31, 2024

    CISA adds Fortinet, Ivanti, and Nice Linear flaws to KEV catalog
    • Fortinet · Firewalls and NGFW
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Mar 25 – Mar 31, 2024

    Code42 and Inversion6 name new CISOs

  3. Weekly archive · Mar 25 – Mar 31, 2024

    Cisco bundles IOS and IOS XE security patches
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Mar 18 – Mar 24, 2024

    Fujitsu finds malware on systems, investigates possible data breach
    • Fujitsu · Security consulting and advisory

  5. Weekly archive · Mar 18 – Mar 24, 2024

    CISA flags Ivanti fixes for Neurons for ITSM and Standalone Sentry
    • Ivanti · Endpoint management and application control

  6. Weekly archive · Mar 4 – Mar 10, 2024

    Microsoft Discloses Widening Nation-State Breach of Source Code

February 2024 · 10 items

  1. Weekly archive · Feb 26 – Mar 3, 2024

    Five Eyes Warn of Active Exploitation Across Ivanti Connect Secure and Policy Secure
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Feb 26 – Mar 3, 2024

    CISA Adds Microsoft Streaming Service Flaw to Known Exploited Vulnerabilities Catalog

  3. Weekly archive · Feb 26 – Mar 3, 2024

    Cisco Issues NX-OS Advisories Covering MPLS and BGP Denial-of-Service Flaws
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Feb 19 – Feb 25, 2024

    Microsoft extends expanded audit logging to all federal agencies

  5. Weekly archive · Feb 12 – Feb 18, 2024

    CISA Adds Cisco ASA/FTD and Exchange Flaws to Known Exploited Vulnerabilities Catalog

  6. Weekly archive · Feb 12 – Feb 18, 2024

    Critical Fortinet FortiOS Flaw Found Under Active Exploitation

  7. Weekly archive · Feb 12 – Feb 18, 2024

    Microsoft's February Patch Tuesday Fixes Two Exploited Zero-Days

  8. Weekly archive · Feb 5 – Feb 11, 2024

    Fortinet Patches Critical FortiOS Flaws, One Possibly Exploited

  9. Weekly archive · Feb 5 – Feb 11, 2024

    Cisco Patches Vulnerabilities in Expressway Series Collaboration Gateways
    • Cisco · Firewalls and NGFW

  10. Weekly archive · Feb 5 – Feb 11, 2024

    VMware Fixes Multiple Flaws in Aria Operations for Networks
    • VMware · Cloud workload protection

January 2024 · 13 items

  1. Weekly archive · Jan 29 – Feb 4, 2024

    Ivanti discloses two more Connect Secure and Policy Secure flaws
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Jan 29 – Feb 4, 2024

    Cloudflare details a nation-state intrusion enabled by Okta-era credentials

  3. Weekly archive · Jan 22 – Jan 28, 2024

    HPE Discloses Nation-State Email Breach in SEC Filing

  4. Weekly archive · Jan 22 – Jan 28, 2024

    F5 Names Samir Sherif as Chief Information Security Officer
    • F5 · WAF and WAAP

  5. Weekly archive · Jan 15 – Jan 21, 2024

    CISA Issues Emergency Directive on Ivanti Connect Secure and Policy Secure Flaws
    • Ivanti · Endpoint management and application control

  6. Weekly archive · Jan 15 – Jan 21, 2024

    Microsoft Discloses Nation-State Email Breach Affecting Senior Leadership

  7. Weekly archive · Jan 15 – Jan 21, 2024

    Ivanti Mobile Management Flaw Added to CISA's Known Exploited Vulnerabilities List
    • Ivanti · Endpoint management and application control

  8. Weekly archive · Jan 8 – Jan 14, 2024

    Ivanti Connect Secure and Policy Secure zero-days exploited, added to KEV Catalog
    • Ivanti · Endpoint management and application control

  9. Weekly archive · Jan 8 – Jan 14, 2024

    Cisco patches critical Unity Connection file-upload flaw
    • Cisco · Firewalls and NGFW

  10. Weekly archive · Jan 8 – Jan 14, 2024

    Microsoft's January Patch Tuesday fixes two critical Windows flaws

  11. Weekly archive · Jan 1 – Jan 7, 2024

    SonicWall Acquires Banyan Security to Expand Zero Trust and SSE Offerings

  12. Weekly archive · Jan 1 – Jan 7, 2024

    SentinelOne to Acquire Cloud Security Startup PingSafe

  13. Weekly archive · Jan 1 – Jan 7, 2024

    Judy Security Names Christopher Leach as Chief Information Security Officer

December 2023 · 2 items

  1. Weekly archive · Dec 25 – Dec 31, 2023

    Capgemini Finds Data Security Still Blocks Bank Cloud Adoption
    • Capgemini · Security consulting and advisory

  2. Weekly archive · Dec 11 – Dec 17, 2023

    Microsoft Details OAuth App Abuse for Cryptomining and Phishing Campaigns

November 2023 · 3 items

  1. Weekly archive · Nov 13 – Nov 19, 2023

    CISA Flags Sophos, Oracle, and Windows Flaws as Actively Exploited

  2. Weekly archive · Nov 13 – Nov 19, 2023

    Microsoft Ships November Patch Tuesday Fixes

  3. Weekly archive · Nov 6 – Nov 12, 2023

    Sumo Logic investigates access through a compromised AWS credential

October 2023 · 11 items

  1. Weekly archive · Oct 30 – Nov 5, 2023

    CISA Adds Two F5 BIG-IP Flaws to Known Exploited Vulnerabilities Catalog
    • F5 · WAF and WAAP

  2. Weekly archive · Oct 30 – Nov 5, 2023

    CISA Updates Guidance on Exploited Cisco IOS XE Web UI Bugs
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Oct 23 – Oct 29, 2023

    CISA Adds Cisco IOS XE Flaw to KEV Catalog
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Oct 23 – Oct 29, 2023

    CISA Updates Cisco IOS XE Patch Guidance Again
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Oct 23 – Oct 29, 2023

    VMware Discloses vCenter Server Out-of-Bounds Write Flaws
    • VMware · Cloud workload protection

  6. Weekly archive · Oct 23 – Oct 29, 2023

    Okta Support System Breach Reaches 1Password
    • 1Password · Password and secrets vaults for people
    • Okta · Workforce IAM and SSO

  7. Weekly archive · Oct 16 – Oct 22, 2023

    Cisco IOS XE Web UI zero-day exploited to install implants
    • Cisco · Firewalls and NGFW

  8. Weekly archive · Oct 16 – Oct 22, 2023

    CISA issues guidance on second Cisco IOS XE Web UI vulnerability
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Oct 16 – Oct 22, 2023

    CISA adds Citrix NetScaler and Cisco IOS XE bugs to KEV catalog
    • Cisco · Firewalls and NGFW

  10. Weekly archive · Oct 9 – Oct 15, 2023

    CISA Adds Five Actively Exploited Flaws to KEV Catalog

  11. Weekly archive · Oct 9 – Oct 15, 2023

    Microsoft Fixes Three Actively Exploited Zero-Days in October Patch Tuesday

September 2023 · 8 items

  1. Weekly archive · Sep 18 – Sep 24, 2023

    Trend Micro Apex One RCE Flaw Joins KEV Catalog

  2. Weekly archive · Sep 11 – Sep 17, 2023

    Microsoft and Adobe Patch Actively Exploited Zero-Days in September Update

  3. Weekly archive · Sep 11 – Sep 17, 2023

    CISA Adds Chrome, Cisco, and Android Flaws to KEV Catalog
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Sep 11 – Sep 17, 2023

    Fortinet Patches Vulnerabilities Enabling System Takeover in FortiOS, FortiProxy, FortiWeb

  5. Weekly archive · Sep 4 – Sep 10, 2023

    CISA, FBI, CNMF Detail Nation-State Exploitation of ManageEngine and FortiOS Flaws

  6. Weekly archive · Sep 4 – Sep 10, 2023

    Microsoft Details How a Signing Key Enabled Chinese Hacking of Government Email

  7. Weekly archive · Sep 4 – Sep 10, 2023

    CISA Publishes Malware Analysis of Barracuda ESG Backdoors

  8. Weekly archive · Sep 4 – Sep 10, 2023

    Cisco Issues Advisories for BroadWorks and Identity Services Engine Flaws
    • Cisco · Firewalls and NGFW

August 2023 · 11 items

  1. Weekly archive · Aug 28 – Sep 3, 2023

    Kroll SIM-Swap Attack Exposed FTX, BlockFi, Genesis Client Data
    • Kroll · Incident response and forensics

  2. Weekly archive · Aug 28 – Sep 3, 2023

    VMware Fixes Critical Authentication-Bypass Bug in Aria Operations for Networks
    • VMware · Cloud workload protection

  3. Weekly archive · Aug 28 – Sep 3, 2023

    Proof-of-Concept Exploit Published for Unauthenticated RCE Chain in Juniper Firewalls

  4. Weekly archive · Aug 21 – Aug 27, 2023

    Ivanti Sentry and Veeam bugs added to KEV Catalog
    • Ivanti · Endpoint management and application control
    • Veeam · Backup and cyber recovery

  5. Weekly archive · Aug 21 – Aug 27, 2023

    Ivanti Sentry zero-day flaw draws urgent patch guidance
    • Ivanti · Endpoint management and application control

  6. Weekly archive · Aug 21 – Aug 27, 2023

    Juniper patches chainable RCE flaws in firewalls and switches

  7. Weekly archive · Aug 14 – Aug 20, 2023

    Colorado's Medicaid agency warns 4 million people after IBM's MOVEit server was breached
    • IBM · Data security posture management

  8. Weekly archive · Aug 7 – Aug 13, 2023

    Microsoft .NET Core Denial-of-Service Flaw Added to KEV Catalog

  9. Weekly archive · Aug 7 – Aug 13, 2023

    Fortinet Patches FortiOS Vulnerability Allowing System Takeover

  10. Weekly archive · Aug 7 – Aug 13, 2023

    CISA Details SEASPY and WHIRLPOOL Backdoors From Barracuda ESG Compromise

  11. Weekly archive · Aug 7 – Aug 13, 2023

    CISA Releases Twelve Siemens Industrial Control Systems Advisories

July 2023 · 10 items

  1. Weekly archive · Jul 31 – Aug 6, 2023

    CISA Adds Ivanti EPMM Path Traversal Flaw to KEV Catalog
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Jul 31 – Aug 6, 2023

    CISA and Norway's NCSC Detail APT Exploitation of Ivanti EPMM
    • Ivanti · Endpoint management and application control

  3. Weekly archive · Jul 31 – Aug 6, 2023

    CISA Flags New SUBMARINE Backdoor in Barracuda ESG Attacks

  4. Weekly archive · Jul 24 – Jul 30, 2023

    Ivanti EPMM zero-day used against 12 Norwegian ministries
    • Ivanti · Endpoint management and application control

  5. Weekly archive · Jul 24 – Jul 30, 2023

    CISA publishes analysis of the Barracuda ESG backdoors

  6. Weekly archive · Jul 24 – Jul 30, 2023

    IBM puts the average breach at $4.45 million
    • IBM · Data security posture management

  7. Weekly archive · Jul 24 – Jul 30, 2023

    Thales agrees to buy Imperva for $3.6 billion
    • Imperva · WAF and WAAP
    • Thales · Encryption, tokenization and key management

  8. Weekly archive · Jul 17 – Jul 23, 2023

    Adobe ColdFusion vulnerabilities exploited in the wild to deliver webshells
    • Rapid7 · Vulnerability management

  9. Weekly archive · Jul 10 – Jul 16, 2023

    Microsoft's July Patch Tuesday Fixes Four Exploited Zero-Days

  10. Weekly archive · Jul 3 – Jul 9, 2023

    JumpCloud invalidates admin API keys over an "ongoing incident"

June 2023 · 4 items

  1. Weekly archive · Jun 19 – Jun 25, 2023

    CISA Adds Six More KEVs, Including VMware Aria and Roundcube Bugs
    • VMware · Cloud workload protection

  2. Weekly archive · Jun 19 – Jun 25, 2023

    VMware Patches Memory Corruption Flaws in vCenter Server
    • VMware · Cloud workload protection

  3. Weekly archive · Jun 12 – Jun 18, 2023

    Barracuda Updates Advisory on Exploited Email Security Gateway Flaw

  4. Weekly archive · Jun 5 – Jun 11, 2023

    VMware Patches Critical Command Injection Flaw in Aria Operations for Networks
    • VMware · Cloud workload protection

May 2023 · 5 items

  1. Weekly archive · May 29 – Jun 4, 2023

    Barracuda ESG appliances were exploited from October 2022

  2. Weekly archive · May 22 – May 28, 2023

    Barracuda Email Security Gateway exploited through CVE-2023-2868

  3. Weekly archive · May 22 – May 28, 2023

    Rapid7 warns Zyxel firewall flaw is easy to weaponize
    • Rapid7 · Vulnerability management

  4. Weekly archive · May 15 – May 21, 2023

    Cisco Advisory Flags Critical Flaws in Small Business Switches
    • Cisco · Firewalls and NGFW

  5. Weekly archive · May 8 – May 14, 2023

    Microsoft's May Patch Tuesday Fixes Two Actively Exploited Flaws

April 2023 · 7 items

  1. Weekly archive · Apr 24 – Apr 30, 2023

    VMware patches two Aria Operations for Logs vulnerabilities
    • VMware · Cloud workload protection

  2. Weekly archive · Apr 17 – Apr 23, 2023

    Joint Advisory Details APT28 Exploitation of Cisco Routers via CVE-2017-6742
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Apr 17 – Apr 23, 2023

    VMware Patches Aria Operations for Logs Vulnerabilities
    • VMware · Cloud workload protection

  4. Weekly archive · Apr 17 – Apr 23, 2023

    ESET Finds Sensitive Corporate Data Left on Resold Routers
    • ESET · Endpoint protection platforms

  5. Weekly archive · Apr 10 – Apr 16, 2023

    Microsoft patches a CLFS zero-day tied to Nokoyawa ransomware

  6. Weekly archive · Apr 10 – Apr 16, 2023

    Darktrace finds no evidence behind a LockBit breach claim

  7. Weekly archive · Apr 3 – Apr 9, 2023

    Cisco Issues Advisories for Remote Code Execution and Command Injection Flaws
    • Cisco · Firewalls and NGFW

March 2023 · 8 items

  1. Weekly archive · Mar 27 – Apr 2, 2023

    CISA Adds Ten Vulnerabilities to KEV Catalog
    • Cobalt · Penetration testing and red team services

  2. Weekly archive · Mar 27 – Apr 2, 2023

    Ransomware Actors Keep Exploiting IBM Aspera Faspex Flaw
    • IBM · Data security posture management

  3. Weekly archive · Mar 27 – Apr 2, 2023

    Microsoft Unveils AI-Powered Security Copilot

  4. Weekly archive · Mar 20 – Mar 26, 2023

    Cisco Publishes Nine Security Advisories for IOS XE and Related Products
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Mar 20 – Mar 26, 2023

    CISA Issues Seven ICS Advisories Covering Keysight, Siemens and Rockwell Automation

  6. Weekly archive · Mar 13 – Mar 19, 2023

    Microsoft Ships March 2023 Security Updates

  7. Weekly archive · Mar 6 – Mar 12, 2023

    Fortinet Issues March 2023 Vulnerability Advisories

  8. Weekly archive · Mar 6 – Mar 12, 2023

    Cisco Discloses IOS XR Denial-of-Service Flaw
    • Cisco · Firewalls and NGFW

February 2023 · 9 items

  1. Weekly archive · Feb 27 – Mar 5, 2023

    LastPass details the second-stage attack on its cloud backups
    • LastPass · Password and secrets vaults for people

  2. Weekly archive · Feb 27 – Mar 5, 2023

    ESET analyzes BlackLotus, a UEFI bootkit that defeats Secure Boot

  3. Weekly archive · Feb 20 – Feb 26, 2023

    CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog
    • IBM · Data security posture management

  4. Weekly archive · Feb 20 – Feb 26, 2023

    Fortinet Patches Multiple Products Amid Exploitation Concerns

  5. Weekly archive · Feb 20 – Feb 26, 2023

    Cisco Discloses Advisories Spanning ACI, Nexus, and ClamAV
    • Cisco · Firewalls and NGFW

  6. Weekly archive · Feb 20 – Feb 26, 2023

    VMware Patches Carbon Black App Control Vulnerability
    • VMware · Cloud workload protection

  7. Weekly archive · Feb 13 – Feb 19, 2023

    Microsoft February Patch Tuesday Fixes Three Exploited Zero-Days

  8. Weekly archive · Feb 13 – Feb 19, 2023

    Cisco Issues Advisories Covering ClamAV, Nexus Dashboard and Email Security Products
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Feb 6 – Feb 12, 2023

    ESXiArgs Ransomware Hits Thousands of VMware ESXi Servers
    • VMware · Cloud workload protection

January 2023 · 7 items

  1. Weekly archive · Jan 30 – Feb 5, 2023

    Verified OAuth Apps Used to Breach O365 Accounts

  2. Weekly archive · Jan 30 – Feb 5, 2023

    Cisco Patches Persistent Code-Injection Flaw in Industrial Gear
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Jan 23 – Jan 29, 2023

    VMware Patches vRealize Log Insight Against Remote Takeover Flaws
    • VMware · Cloud workload protection

  4. Weekly archive · Jan 9 – Jan 15, 2023

    Rackspace Confirms Exchange Exploit Chain Behind Hosted Email Ransomware Breach

  5. Weekly archive · Jan 9 – Jan 15, 2023

    Microsoft's January Patch Tuesday Fixes Actively Exploited Windows Zero-Day

  6. Weekly archive · Jan 9 – Jan 15, 2023

    Researchers Disclose Unpatchable Root-of-Trust Flaw in Siemens S7-1500 PLCs

  7. Weekly archive · Jan 2 – Jan 8, 2023

    Fortinet Patches Remote Code Execution Flaw in FortiADC

December 2022 · 5 items

  1. Weekly archive · Dec 26 – Jan 1, 2023

    LastPass Breach Fallout Continued Through the Holiday Week
    • LastPass · Password and secrets vaults for people

  2. Weekly archive · Dec 19 – Dec 25, 2022

    LastPass discloses theft of customer vault backups
    • LastPass · Password and secrets vaults for people

  3. Weekly archive · Dec 19 – Dec 25, 2022

    Sectigo names Kevin Weiss as CEO
    • Sectigo · Machine identity and PKI

  4. Weekly archive · Dec 12 – Dec 18, 2022

    Fortinet Patches Actively Exploited FortiOS Zero-Day

  5. Weekly archive · Dec 12 – Dec 18, 2022

    Microsoft Patches Exploited SmartScreen Zero-Day, Revokes Abused Driver Certificates

November 2022 · 4 items

  1. Weekly archive · Nov 14 – Nov 20, 2022

    Cisco Patched Identity Services Engine Flaws Allowing Authorization Bypass
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Nov 7 – Nov 13, 2022

    Microsoft's November security updates address multiple actively exploited flaws

  3. Weekly archive · Nov 7 – Nov 13, 2022

    Cisco patches multiple products including ASA and Secure Firewall 3100
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Nov 7 – Nov 13, 2022

    CISA releases twenty ICS advisories covering Siemens, Omron, and others

October 2022 · 8 items

  1. Weekly archive · Oct 31 – Nov 6, 2022

    CISA Flags Cisco Security Updates for Multiple Products
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Oct 24 – Oct 30, 2022

    Microsoft ties Raspberry Robin USB worm infections to Clop ransomware

  3. Weekly archive · Oct 17 – Oct 23, 2022

    Cisco Patches Identity Services Engine Vulnerabilities
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Oct 10 – Oct 16, 2022

    Microsoft's October Patch Tuesday Fixed 85 Flaws, Including an Actively Exploited Windows Bug

  5. Weekly archive · Oct 10 – Oct 16, 2022

    Fortinet Confirmed Active Exploitation of Critical FortiOS Auth-Bypass Flaw

  6. Weekly archive · Oct 10 – Oct 16, 2022

    Vista Equity Partners Agreed to Take KnowBe4 Private for $4.6 Billion
    • KnowBe4 · Security awareness training

  7. Weekly archive · Oct 3 – Oct 9, 2022

    Exchange Zero-Days CVE-2022-41040 and CVE-2022-41082 Added to CISA's KEV Catalog

  8. Weekly archive · Oct 3 – Oct 9, 2022

    Cisco Patches Multiple Products After CISA Alert
    • Cisco · Firewalls and NGFW

September 2022 · 7 items

  1. Weekly archive · Sep 26 – Oct 2, 2022

    Microsoft Discloses Exchange Server Zero-Days Under Active Attack

  2. Weekly archive · Sep 26 – Oct 2, 2022

    Sophos Patches Exploited Firewall RCE Flaw

  3. Weekly archive · Sep 26 – Oct 2, 2022

    VMware Issues Guidance on ESXi-Targeting Malware
    • VMware · Cloud workload protection

  4. Weekly archive · Sep 12 – Sep 18, 2022

    Eight agencies warn of IRGC-affiliated actors running ransom operations

  5. Weekly archive · Sep 12 – Sep 18, 2022

    LastPass: the August intruder had four days inside its development environment
    • LastPass · Password and secrets vaults for people

  6. Weekly archive · Sep 12 – Sep 18, 2022

    Microsoft and Apple each patch an exploited kernel-level zero-day

  7. Weekly archive · Sep 5 – Sep 11, 2022

    Cisco Patches SD-WAN vManage and NVIDIA DPDK Flaws
    • Cisco · Firewalls and NGFW

August 2022 · 9 items

  1. Weekly archive · Aug 22 – Aug 28, 2022

    Cisco Patched Multiple Products Against Remote Takeover Flaws
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Aug 22 – Aug 28, 2022

    0ktapus Phishing Campaign Tied to Twilio, Cloudflare Breaches Detailed

  3. Weekly archive · Aug 22 – Aug 28, 2022

    GitLab Patched Critical Remote Code Execution Flaw
    • GitLab · Static application security testing

  4. Weekly archive · Aug 15 – Aug 21, 2022

    Cisco Patches Privilege Escalation Flaw in Secure Web Appliance
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Aug 15 – Aug 21, 2022

    Ring App Vulnerability Could Have Exposed Camera Recordings
    • Checkmarx · Static application security testing

  6. Weekly archive · Aug 8 – Aug 14, 2022

    Cisco Confirms Corporate Network Breach Tied to Yanluowang-Linked Actor
    • Cisco · Firewalls and NGFW

  7. Weekly archive · Aug 8 – Aug 14, 2022

    Microsoft Patches Actively Exploited MSDT Zero-Day

  8. Weekly archive · Aug 8 – Aug 14, 2022

    Cisco Fixes RSA Private Key Leak in ASA and Firepower Software
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Aug 1 – Aug 7, 2022

    VMware: patch the CVE-2022-31656 authentication bypass immediately
    • VMware · Cloud workload protection

July 2022 · 9 items

  1. Weekly archive · Jul 25 – Jul 31, 2022

    CISA Details Log4Shell Exploitation of Unpatched VMware Horizon Server
    • VMware · Cloud workload protection

  2. Weekly archive · Jul 25 – Jul 31, 2022

    IBM: Average Data Breach Cost Hits $4.35 Million
    • IBM · Data security posture management

  3. Weekly archive · Jul 25 – Jul 31, 2022

    WithSecure Uncovers DUCKTAIL Campaign Hijacking Facebook Business Accounts

  4. Weekly archive · Jul 18 – Jul 24, 2022

    Cisco Issues Security Updates Across Multiple Products
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Jul 18 – Jul 24, 2022

    CISA Refreshes Log4Shell Advisory for VMware Horizon Systems
    • VMware · Cloud workload protection

  6. Weekly archive · Jul 11 – Jul 17, 2022

    Microsoft Ships July 2022 Security Updates

  7. Weekly archive · Jul 11 – Jul 17, 2022

    Juniper Networks Releases Security Updates for Multiple Products

  8. Weekly archive · Jul 4 – Jul 10, 2022

    Cisco Issues Updates for Expressway, TelePresence VCS, and Smart Software Manager
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Jul 4 – Jul 10, 2022

    OneSpan Names Michael Lillie as Chief Information Officer
    • OneSpan · Passwordless authentication and authenticators

June 2022 · 4 items

  1. Weekly archive · Jun 27 – Jul 3, 2022

    CISA Reinstates Windows Certificate-Authentication Flaw to KEV Catalog

  2. Weekly archive · Jun 20 – Jun 26, 2022

    Log4Shell exploitation of VMware Horizon continues six months on
    • VMware · Cloud workload protection

  3. Weekly archive · Jun 13 – Jun 19, 2022

    Microsoft Ships June 2022 Security Updates for Multiple Products

  4. Weekly archive · Jun 13 – Jun 19, 2022

    Cisco Patches Email Security Appliance and Small Business Router Flaws
    • Cisco · Firewalls and NGFW

May 2022 · 9 items

  1. Weekly archive · May 30 – Jun 5, 2022

    Microsoft Issues Workaround for "Follina" Zero-Day Under Active Attack

  2. Weekly archive · May 30 – Jun 5, 2022

    CISA Updates Advisory on VMware Vulnerability Chaining
    • VMware · Cloud workload protection

  3. Weekly archive · May 23 – May 29, 2022

    Broadcom agrees to acquire VMware for $61 billion

  4. Weekly archive · May 16 – May 22, 2022

    CISA and MS-ISAC Warn of Active F5 BIG-IP Exploitation
    • F5 · WAF and WAAP

  5. Weekly archive · May 16 – May 22, 2022

    CISA Issues Emergency Directive Over Active VMware Vulnerability Exploitation
    • VMware · Cloud workload protection

  6. Weekly archive · May 16 – May 22, 2022

    CISA Adds Zyxel Firewall and VMware Spring Cloud Gateway Flaws to KEV Catalog
    • VMware · Cloud workload protection

  7. Weekly archive · May 9 – May 15, 2022

    Exploit attempts follow proof-of-concept code for F5 BIG-IP CVE-2022-1388
    • F5 · WAF and WAAP

  8. Weekly archive · May 2 – May 8, 2022

    Cisco Patches Multiple Flaws in Enterprise NFV Infrastructure Software
    • Cisco · Firewalls and NGFW

  9. Weekly archive · May 2 – May 8, 2022

    F5 Discloses Critical BIG-IP Authentication Bypass, CVE-2022-1388
    • F5 · WAF and WAAP

April 2022 · 11 items

  1. Weekly archive · Apr 25 – May 1, 2022

    Five Nations Issue Joint Advisory on 2021's Most Exploited Vulnerabilities

  2. Weekly archive · Apr 25 – May 1, 2022

    Cisco Issues Security Updates Across Multiple Products
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Apr 18 – Apr 24, 2022

    Cisco patches multiple products against takeover vulnerabilities
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Apr 11 – Apr 17, 2022

    CISA adds exploited VMware Workspace ONE Access flaw to KEV Catalog
    • VMware · Cloud workload protection

  5. Weekly archive · Apr 11 – Apr 17, 2022

    CISA adds 10 more vulnerabilities, including a Windows flaw, to KEV Catalog

  6. Weekly archive · Apr 11 – Apr 17, 2022

    Microsoft ships April 2022 security updates across its software line

  7. Weekly archive · Apr 11 – Apr 17, 2022

    Microsoft flags critical unauthenticated RCE in RPC Runtime Library

  8. Weekly archive · Apr 11 – Apr 17, 2022

    VMware patches remote code execution flaw in Cloud Director
    • VMware · Cloud workload protection

  9. Weekly archive · Apr 4 – Apr 10, 2022

    CISA Adds Three More Vulnerabilities to KEV Catalog

  10. Weekly archive · Apr 4 – Apr 10, 2022

    VMware Issues Security Updates Across Multiple Products
    • VMware · Cloud workload protection

  11. Weekly archive · Apr 4 – Apr 10, 2022

    Microsoft Expands Bug Bounty to On-Premises Exchange and SharePoint Servers

March 2022 · 6 items

  1. Weekly archive · Mar 28 – Apr 3, 2022

    Sophos Firewall authentication bypass exploited in South Asia

  2. Weekly archive · Mar 21 – Mar 27, 2022

    Microsoft and Okta Confirm Lapsus$ Intrusion Impact

  3. Weekly archive · Mar 21 – Mar 27, 2022

    VMware Patches Carbon Black App Control Vulnerabilities
    • VMware · Cloud workload protection

  4. Weekly archive · Mar 21 – Mar 27, 2022

    Deepwatch Names David Stoicescu as CISO

  5. Weekly archive · Mar 14 – Mar 20, 2022

    Veeam patches two critical remote code execution flaws
    • Veeam · Backup and cyber recovery

  6. Weekly archive · Mar 7 – Mar 13, 2022

    Microsoft's March Patch Tuesday Fixes 71 Vulnerabilities

February 2022 · 5 items

  1. Weekly archive · Feb 28 – Mar 6, 2022

    Cisco Patched Flaws in Expressway, Ultra Cloud Core and ISE
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Feb 28 – Mar 6, 2022

    Broadcom's Symantec Unit Disclosed Daxin Backdoor Used in Espionage Campaign

  3. Weekly archive · Feb 21 – Feb 27, 2022

    Sandworm's Cyclops Blink replaces VPNFilter on WatchGuard firewalls

  4. Weekly archive · Feb 21 – Feb 27, 2022

    Zabbix, Zimbra and old Microsoft bugs added to the exploited list

  5. Weekly archive · Feb 21 – Feb 27, 2022

    Appgate names Leo Taddeo as its CISO
    • Appgate · Zero trust network access

January 2022 · 8 items

  1. Weekly archive · Jan 31 – Feb 6, 2022

    CISA Adds Microsoft Win32k Flaw to Known Exploited Vulnerabilities Catalog

  2. Weekly archive · Jan 31 – Feb 6, 2022

    Cisco Patches Small Business RV Series Router Vulnerabilities
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Jan 10 – Jan 16, 2022

    Microsoft's January Patch Tuesday Fixes Wormable Windows Server Flaw

  4. Weekly archive · Jan 10 – Jan 16, 2022

    Microsoft Warns of Destructive Wiper Targeting Ukrainian Organizations

  5. Weekly archive · Jan 10 – Jan 16, 2022

    Ivanti Updates Log4j Advisory for Multiple Products
    • Ivanti · Endpoint management and application control

  6. Weekly archive · Jan 10 – Jan 16, 2022

    Cisco Patches Privilege Escalation Flaw in Contact Center Management Tools
    • Cisco · Firewalls and NGFW

  7. Weekly archive · Jan 3 – Jan 9, 2022

    Sygnia details "Elephant Beetle," a patient financial-theft group
    • Sygnia · Incident response and forensics

  8. Weekly archive · Jan 3 – Jan 9, 2022

    VMware fixes a take-over flaw in Workstation, Fusion and ESXi
    • VMware · Cloud workload protection