Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
French government cyber assistance platform Cybermalveillance issued guidance regarding the customer personal data breach at telecom operator Free .
On 2024-10-24, CISA added CVE-2024-20481 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)) to its Known Exploited Vulnerabilities (KEV) catalog .
Fortinet published a security advisory in October 2024 regarding CVE-2024-47575 in FortiManager .
On 2024-10-22, CISA added CVE-2024-38094 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to China Daily Hong Kong, citing an investigation by the Office of the Privacy Commissioner for Personal Data (PCPD), the South China Athletic Association (SCAA) suffered a ransomware attack in March 2024 that affected the personal data of 72,315 members .
Mexican airport operator Grupo Aeroportuario del Centro Norte (OMA) issued an official statement on October 18, 2024, confirming a cybersecurity incident .
On 2024-10-17, CISA added CVE-2024-40711 (Veeam Backup & Replication) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to El Comercio, identity and contact data belonging to more than 82,000 residents of Miraflores circulated online again in 2024 .
On 2024-10-15, CISA added CVE-2024-9680 (Mozilla Firefox) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-10-15, CISA added CVE-2024-30088 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-10-09, CISA added CVE-2024-9380 (Ivanti Cloud Services Appliance (CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-10-09, CISA added CVE-2024-9379 (Ivanti Cloud Services Appliance (CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-10-09, CISA added CVE-2024-23113 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
According to iThome, following a wave of DDoS attacks against multiple listed companies and government agencies in Taiwan since early September, another wave of attacks occurred during the first weekend of October, targeting websites of prominent high-tech and petrochemical enterprises .
According to The Record, Russian state media group VGTRK suffered a cyberattack that disrupted some of its online services .
On 2024-10-02, CISA added CVE-2024-29824 (Ivanti Endpoint Manager (EPM)) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-09-30, CISA added CVE-2019-0344 (SAP Commerce Cloud) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-24, CISA added CVE-2024-7593 (Ivanti Virtual Traffic Manager) to its Known Exploited Vulnerabilities (KEV) catalog .
Hanwa Co.
On 2024-09-19, CISA added CVE-2024-8963 (Ivanti Cloud Services Appliance (CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .