Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2025-03-04, CISA added CVE-2025-22224 (VMware ESXi and Workstation) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-03-03, CISA added CVE-2024-4885 (Progress WhatsUp Gold) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-03, CISA added CVE-2023-20118 (Cisco Small Business RV Series Routers) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-03, CISA added CVE-2018-8639 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
Cryptocurrency exchange Bybit disclosed in February 2025 that it suffered a severe security incident in which assets from one of its Ethereum cold wallets were transferred out .
On 2025-02-20, CISA added CVE-2025-0111 (Palo Alto Networks PAN-OS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-02-18, CISA added CVE-2025-0108 (Palo Alto Networks PAN-OS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-02-18, CISA added CVE-2024-53704 (SonicWall SonicOS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-02-13, CISA added CVE-2024-57727 (SimpleHelp SimpleHelp) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-02-06, CISA added CVE-2020-29574 (Sophos CyberoamOS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-01-24, CISA added CVE-2025-23006 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Daily Trust, Nigerian police arraigned five suspects in court over allegations of unauthorized access and fund transfers involving Sterling Bank's banking platform and Bance application .
According to German regional media outlet Augsburger Allgemeine, Wertachkliniken hospitals suffered a cyberattack .
On 2025-01-14, CISA added CVE-2024-55591 (Fortinet FortiOS and FortiProxy) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Record, citing Roseltorg, the electronic procurement platform suffered an external attack aimed at destroying data and its overall trading infrastructure .
On 2025-01-13, CISA added CVE-2023-48365 (Qlik Sense) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-01-08, CISA added CVE-2025-0282 (Ivanti Connect Secure, Policy Secure, and ZTA Gateways) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Record, citing a statement from Russian internet service provider Nodex, the company suffered a cyberattack in early January 2025 that damaged its infrastructure .
On 2025-01-07, CISA added CVE-2024-55550 (Mitel MiCollab) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-01-07, CISA added CVE-2024-41713 (Mitel MiCollab) to its Known Exploited Vulnerabilities (KEV) Catalog .