Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Dutch medical laboratory Clinical Diagnostics Nederland issued an important notice detailing a security incident involving patient and healthcare worker data .
On 2025-07-10, CISA added CVE-2025-5777 (Citrix NetScaler ADC and Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-02, Qantas confirmed that a third-party servicing platform used by a contact center was breached and that the system has since been contained .
On 2025-06-30, CISA added CVE-2025-6543 (Citrix NetScaler ADC and Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-06-25, CISA added CVE-2019-6693 (Fortinet FortiOS) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Korea JoongAng Daily, South Korean media reported that online bookstore Yes24 suffered a ransomware attack .
According to LOG, Turkey's Personal Data Protection Authority (KVKK) said Manisa transport company Manulaş reported that its systems were hit by a ransomware attack on 25 May 2025 and that the incident was detected the same day .
According to LOG, citing a notification from Turkey's Personal Data Protection Authority (KVKK), systems at a company processing data on behalf of Istanbul Gedik University suffered unauthorized access .
On 2025-06-02, CISA added CVE-2025-3935 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Semana, citing a statement from EPM, the company discovered on May 23, 2025, that its Factura Web payment page had been impersonated, diverting customer payments to third parties .
On 2025-05-19, CISA added CVE-2025-4428 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-19, CISA added CVE-2025-4427 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
The UK Legal Aid Agency and Ministry of Justice disclosed that a cyberattack on the agency's online digital services was discovered on April 23, 2025 .
On 2025-05-15, CISA added CVE-2025-42999 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-14, CISA added CVE-2025-32756 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-05, CISA added CVE-2025-3248 (Langflow Langflow) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to El Tiempo, citing confirmation from the head of the Piura Tax Administration Service (SAT Piura), its tax information system was attacked on March 29, 2025, with the attackers demanding payment in Bitcoin .
On 2025-05-01, CISA added CVE-2024-38475 (Apache HTTP Server) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-05-01, CISA added CVE-2023-44221 (SonicWall SMA100 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-29, CISA added CVE-2025-31324 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .