Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2024-02-07, CISA, NSA, and the FBI issued a joint advisory attributing confirmed intrusions into U.
On 2024-01-31, CISA added CVE-2024-21893 (Ivanti Connect Secure, Policy Secure, and Neurons) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Caracol Radio, Colombian healthcare provider Salud Total EPS suffered an external cyberattack on January 27, 2024 that impacted its IT servers .
On 2024-01-24, CISA added CVE-2023-22527 (Atlassian Confluence Data Center and Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-22, CISA added CVE-2023-34048 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
Nordic IT services provider Tietoevry announced that one of its data centers in Sweden was hit by a ransomware attack during the night of January 19–20, 2024 .
In early 2024, Microsoft published incident response guidance regarding activity by threat actor Midnight Blizzard .
On 2024-01-18, CISA added CVE-2023-35082 (Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-17, CISA added CVE-2023-6549 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-17, CISA added CVE-2023-6548 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-16, the FBI and CISA released a joint cybersecurity advisory detailing indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with Androxgh0st malware .
On 2024-01-10, CISA added CVE-2023-29357 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On January 10, 2024, CISA issued an alert warning that Ivanti Connect Secure and Policy Secure contain vulnerabilities CVE-2023-46805 and CVE-2024-21887 .
On 2024-01-08, CISA added CVE-2023-38203 (Adobe ColdFusion) to its Known Exploited Vulnerabilities (KEV) catalog .
On January 8, 2024, CISA added CVE-2023-29300 (Adobe ColdFusion) to its Known Exploited Vulnerabilities (KEV) catalog .