Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2024-10-09, CISA added CVE-2024-9379 (Ivanti Cloud Services Appliance (CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-10-09, CISA added CVE-2024-23113 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
According to iThome, following a wave of DDoS attacks against multiple listed companies and government agencies in Taiwan since early September, another wave of attacks occurred during the first weekend of October, targeting websites of prominent high-tech and petrochemical enterprises .
According to The Record, Russian state media group VGTRK suffered a cyberattack that disrupted some of its online services .
On 2024-10-02, CISA added CVE-2024-29824 (Ivanti Endpoint Manager (EPM)) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-09-30, CISA added CVE-2019-0344 (SAP Commerce Cloud) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-24, CISA added CVE-2024-7593 (Ivanti Virtual Traffic Manager) to its Known Exploited Vulnerabilities (KEV) catalog .
Hanwa Co.
On 2024-09-19, CISA added CVE-2024-8963 (Ivanti Cloud Services Appliance (CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .
According to BFMTV, French media reported that telecommunications operator SFR suffered a cyberattack in which customer-related data may have been stolen .
On 2024-09-18, CISA added CVE-2020-0618 (Microsoft SQL Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-16, CISA added CVE-2024-6670 (Progress WhatsUp Gold) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-13, CISA added CVE-2024-8190 (Ivanti Cloud Services Appliance) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-09, CISA added CVE-2024-40766 (SonicWall SonicOS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-09, CISA added CVE-2017-1000253 (Linux Kernel) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to El Heraldo, citing a statement from electric utility Air-e, the company suffered a ransomware attack in the early hours of September 2, 2024, affecting multiple information systems .
According to CNN Chile, after reviewing court filings submitted by BancoEstado, the bank filed a criminal complaint over an internal fraud exceeding 6.
The UK National Crime Agency (NCA) announced that Transport for London's (TfL) computer network was breached between late August and early September 2024 .
Malaysia's Ministry of Digital announced that the Personal Data Protection Commissioner has launched an investigation into a recent cybersecurity incident at national public transport operator Prasarana Malaysia Berhad .
On 2024-08-21, CISA added CVE-2021-31196 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .