Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2025-11-18, CISA added CVE-2025-58034 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-11-14, CISA added CVE-2025-64446 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Korea Herald, an investigation revealed that KT servers had been infected with malware and that the company failed to promptly notify regulatory authorities .
On 2025-10-30, CISA added CVE-2025-41244 (Broadcom VMware Aria Operations and VMware Tools) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-10-20, CISA added CVE-2025-61884 (Oracle E-Business Suite) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2025-61882 (Oracle E-Business Suite) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2021-43226 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Jerusalem Post, Shamir Medical Center suffered a cyberattack involving hospital email correspondence that leaked emails containing patient information .
According to Asharq Al-Awsat, citing a stock exchange filing by Al-Babtain, a secondary server at its Egyptian subsidiary suffered a cyber intrusion .
On 2025-09-29, CISA added CVE-2025-20352 (Cisco IOS and IOS XE) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-09-29, CISA added CVE-2025-10035 (Fortra GoAnywhere MFT) to its Known Exploited Vulnerabilities (KEV) catalog .
Diamond Electric Holdings announced that its Thai subsidiary suffered unauthorized access on September 8, 2025, resulting in local servers and several personal computers being encrypted by ransomware .
On 2025-09-25, CISA added CVE-2025-20362 (Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-09-25, CISA added CVE-2025-20333 (Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Yonhap News Agency, Lotte Card confirmed that a hacking incident resulted in the exposure of personal data belonging to approximately 2.
Official Vietnamese communications indicated that a personal data incident occurred at the National Credit Information Center (CIC) .
According to Security NEXT, Japan's Information-technology Promotion Agency (IPA) released the advance PDF edition of its 'Information Security White Paper 2025' on September 10, 2025 .
On 2025-08-26, CISA added CVE-2025-7775 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) catalog .
Google Threat Intelligence Group (GTIG) published a report in August 2025 revealing that threat actors used compromised OAuth tokens associated with Salesloft Drift to access Salesforce environments across multiple organizations .
On 2025-08-25, CISA added CVE-2024-8069 (Citrix Session Recording) to its Known Exploited Vulnerabilities (KEV) catalog .