Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
According to Security NEXT, LASSIC, operator of the remote talent service Remogu, detected an attack on November 11, 2025, finding traces of unauthorized operations on its server .
According to Security NEXT, Kawamoto Pump Mfg.
According to Security NEXT, Ryokkyukai, the alumni association of Otaru University of Commerce, announced that one of its computers suffered an external intrusion, potentially exposing member personal data .
According to Security NEXT, on December 12, 2025, the Tokyo Metropolitan Government sent a webinar notification via its staff recruitment examinee portal to 9,086 applicants .
On 2025-12-23, Kuaishou issued a statement reporting that its livestreaming feature was targeted by an illicit cyberattack around 22:00 the previous evening .
On 2025-12-19, CISA added CVE-2025-14733 (WatchGuard Firebox) to its Known Exploited Vulnerabilities (KEV) catalog .
In an assessment published on December 18, 2025, the Danish Defence Intelligence Service (DDIS / FE) stated that Russia was responsible for a destructive cyberattack against a Danish water utility in 2024 .
The Danish Defence Intelligence Service (DDIS) assessed that Danish websites were targeted by a series of denial-of-service attacks in the run-up to the 2025 municipal and regional council elections .
On 2025-12-17, CISA added CVE-2025-40602 (SonicWall SMA1000 appliance) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-17, CISA added CVE-2025-20393 (Cisco Multiple Products) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-12-16, CISA added CVE-2025-59718 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-05, CISA added CVE-2025-55182 (Meta React Server Components) to its Known Exploited Vulnerabilities (KEV) catalog .
South Korea's Personal Information Protection Commission found that failures in managing authentication signing keys and access controls at Coupang led to the leak of about 37.
On 2025-11-18, CISA added CVE-2025-58034 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-11-14, CISA added CVE-2025-64446 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Korea Herald, an investigation revealed that KT servers had been infected with malware and that the company failed to promptly notify regulatory authorities .
On 2025-10-30, CISA added CVE-2025-41244 (Broadcom VMware Aria Operations and VMware Tools) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-10-20, CISA added CVE-2025-61884 (Oracle E-Business Suite) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2025-61882 (Oracle E-Business Suite) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2021-43226 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .