Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
According to Security NEXT, on the morning of December 26, 2024, Japan Airlines experienced router malfunctions connecting internal and external networks due to a massive influx of external traffic .
According to Security NEXT, a municipal junior high school teacher in Kariya City lost a personal USB flash drive at a commercial facility while returning home on October 4, 2024 .
According to Security NEXT, Fujikura announced that on July 2, 2024, it discovered unauthorized external access via a network maintenance VPN managed by NTT Communications .
According to Security NEXT, on December 13, 2024, the Nagano Prefecture Sewage Works Corporation mailed documents to 65 successful candidates of a drainage equipment technician examination .
According to TheCable, the website of Nigeria's National Bureau of Statistics (NBS) was compromised, with its homepage defaced with hacked messages .
On 2024-12-17, CISA added CVE-2024-55956 (Cleo Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Infobae, the Peruvian University of Applied Sciences (UPC) experienced a security incident involving student personal data .
On 2024-12-13, CISA added CVE-2024-50623 (Cleo Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Argentine media outlet TN, Argentina's National Atomic Energy Commission (CNEA) suffered a ransomware attack .
According to Hong Kong Free Press (HKFP), citing an investigation by the Office of the Privacy Commissioner for Personal Data (PCPD), the Electrical and Mechanical Services Department (EMSD) experienced a data breach affecting approximately 17,000 individuals after learning in late April 2024 that the data remained publicly accessible .
On 2024-12-04, CISA added CVE-2024-51378 (CyberPersons CyberPanel) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-12-03, CISA added CVE-2024-11667 (Zyxel Multiple Firewalls) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Spanish public broadcaster RTVE, the headquarters of the National Institute for Agricultural and Food Research and Technology (INIA-CSIC) suffered a cyberattack .
According to Dawn, the official website of Pakistan's Capital Development Authority (CDA) suffered a cyberattack in which data was posted on the dark web, before the website was restored several days later .
On 2024-11-25, CISA added CVE-2023-28461 (Array Networks AG/vxAG ArrayOS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-11-20, CISA added CVE-2024-38813 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-11-20, CISA added CVE-2024-38812 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Business Standard, citing a report from a Bangladeshi cyber threat intelligence team, Popular Life Insurance suffered a ransomware-related attack .
On 2024-11-18, CISA added CVE-2024-9474 (Palo Alto Networks PAN-OS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-11-18, CISA added CVE-2024-1212 (Progress Kemp LoadMaster) to its Known Exploited Vulnerabilities (KEV) Catalog .