Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
According to El Vicuñense, citing a statement from the Municipality of Vicuña, the municipal accounting system suffered a cyberattack and a formal complaint has been filed with the relevant authorities .
According to Dawn, citing a spokesperson for Pakistan Petroleum Limited (PPL), the company's IT systems were targeted by a ransomware attack on August 6, 2025 .
According to The Record, Russian pharmacy chain Stolichki confirmed that technical outages halting its operations were caused by a cyberattack .
On 2025-07-28, CISA added CVE-2025-20337 (Cisco Identity Services Engine) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-28, CISA added CVE-2025-20281 (Cisco Identity Services Engine) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Record, Russian authorities confirmed that Aeroflot suffered a cyberattack that caused multiple flight delays and cancellations .
On 2025-07-22, CISA added CVE-2025-49706 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-22, CISA added CVE-2025-49704 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On July 20, 2025, CISA added CVE-2025-53770 ('ToolShell') in on-premises Microsoft SharePoint to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-18, CISA added CVE-2025-25257 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to The Record, citing confirmation from the Permanent Secretary of Thailand's Ministry of Labour, the ministry's website was compromised and defaced before being briefly taken offline and restored .
Dutch medical laboratory Clinical Diagnostics Nederland issued an important notice detailing a security incident involving patient and healthcare worker data .
On 2025-07-10, CISA added CVE-2025-5777 (Citrix NetScaler ADC and Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-02, Qantas confirmed that a third-party servicing platform used by a contact center was breached and that the system has since been contained .
On 2025-06-30, CISA added CVE-2025-6543 (Citrix NetScaler ADC and Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-06-25, CISA added CVE-2019-6693 (Fortinet FortiOS) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Korea JoongAng Daily, South Korean media reported that online bookstore Yes24 suffered a ransomware attack .
According to LOG, Turkey's Personal Data Protection Authority (KVKK) said Manisa transport company Manulaş reported that its systems were hit by a ransomware attack on 25 May 2025 and that the incident was detected the same day .
According to LOG, citing a notification from Turkey's Personal Data Protection Authority (KVKK), systems at a company processing data on behalf of Istanbul Gedik University suffered unauthorized access .
On 2025-06-02, CISA added CVE-2025-3935 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .