Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2025-04-28, CISA added CVE-2025-1976 (Broadcom Brocade Fabric OS) to its Known Exploited Vulnerabilities (KEV) catalog .
South Korea's Ministry of Science and ICT (MSIT) issued a statement regarding the cybersecurity incident at SK Telecom .
Marks & Spencer disclosed a cybersecurity incident in April 2025 and implemented system isolation and operational adjustments .
On 2025-04-16, CISA added CVE-2021-20035 (SonicWall SMA100 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Lawyard, NIBSS applied to the Federal High Court in Lagos to freeze recipient accounts in order to recover funds from unauthorized transfers .
According to The Nation, citing Thailand's personal data protection regulator, Bangchak discovered unauthorized access to its customer feedback system on April 9, 2025 .
According to France 24, Morocco's National Social Security Fund (CNSS) suffered a cyberattack in which data belonging to nearly two million citizens was reportedly taken .
On 2025-04-08, CISA added CVE-2025-29824 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-07, CISA added CVE-2025-31161 (CrushFTP CrushFTP) to its Known Exploited Vulnerabilities (KEV) Catalog .
The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) issued a joint statement regarding a ransomware attack on printing vendor Toppan Next Tech .
On 2025-04-04, CISA added CVE-2025-22457 (Ivanti Connect Secure, Policy Secure, and ZTA Gateways) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to CCTV, citing a report from China's National Computer Virus Emergency Response Center (CVERC), information systems for the Asian Winter Games experienced a large volume of cyberattack attempts between January 26 and February 14, 2025 .
According to iThome, CrazyHunter, which specifically targets Taiwan, struck again in an attack aimed at a Taiwanese corporate group—affecting Netronix, Analog Integrations, and its subsidiary Zunidata Systems, making three companies in the group victims .
According to iThome, on the 31st, CrazyHunter was once again reported targeting Taiwanese enterprises, expanding the scale of its ransomware attacks by simultaneously striking three companies within the Netronix Group (Netronix, Analog Integrations, and Zunidata Systems); when inspecting their websites at 10:00 AM, Analog Integrations and Zunidata Systems were unreachable while the homepage of Netronix had been maliciously defaced .
On 2025-03-31, CISA added CVE-2024-20439 (Cisco Smart Licensing Utility) to its Known Exploited Vulnerabilities (KEV) catalog .
According to DataBreaches citing RTHK, Hong Kong's Office of the Privacy Commissioner for Personal Data (PCPD) stated that a data breach at ImagineX affected nearly 128,000 individuals .
According to New Zealand public broadcaster RNZ, a malicious actor downloaded occupational health and safety personal data belonging to Health NZ staff .
According to iThome, another listed Taiwanese company was reported as a suspected victim of a CrazyHunter ransomware attack, with Johnson Health Tech confirming on the afternoon of the 25th that a cybersecurity incident had occurred .
On 2025-03-19, CISA added CVE-2017-12637 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-18, CISA added CVE-2025-24472 (Fortinet FortiOS and FortiProxy) to its Known Exploited Vulnerabilities (KEV) catalog .