Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2024-09-19, CISA added CVE-2024-8963 (Ivanti Cloud Services Appliance (CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .
According to BFMTV, French media reported that telecommunications operator SFR suffered a cyberattack in which customer-related data may have been stolen .
On 2024-09-18, CISA added CVE-2020-0618 (Microsoft SQL Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-16, CISA added CVE-2024-6670 (Progress WhatsUp Gold) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-13, CISA added CVE-2024-8190 (Ivanti Cloud Services Appliance) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-09, CISA added CVE-2024-40766 (SonicWall SonicOS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-09, CISA added CVE-2017-1000253 (Linux Kernel) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to El Heraldo, citing a statement from electric utility Air-e, the company suffered a ransomware attack in the early hours of September 2, 2024, affecting multiple information systems .
According to CNN Chile, after reviewing court filings submitted by BancoEstado, the bank filed a criminal complaint over an internal fraud exceeding 6.
The UK National Crime Agency (NCA) announced that Transport for London's (TfL) computer network was breached between late August and early September 2024 .
Malaysia's Ministry of Digital announced that the Personal Data Protection Commissioner has launched an investigation into a recent cybersecurity incident at national public transport operator Prasarana Malaysia Berhad .
On 2024-08-21, CISA added CVE-2021-31196 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-08-19, CISA added CVE-2024-23897 (Jenkins Jenkins Command Line Interface (CLI)) to its Known Exploited Vulnerabilities (KEV) catalog .
According to SC Media, citing a Cybernews investigation, an unsecured Apache Cassandra database belonging to Caja Los Andes exposed a massive volume of personal data .
According to The Hindu, the insurance portal of Indian Railway Catering and Tourism Corporation (IRCTC) contained a critical data exposure vulnerability .
On 2024-07-30, CISA added CVE-2024-37085 (VMware ESXi) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Infobae, the IT infrastructure of Peru's Geological, Mining, and Metallurgical Institute (Ingemmet) was hit by a cyberattack in mid-July 2024, disrupting normal operations .
On 2024-07-17, CISA added CVE-2022-22948 (VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-07-09, CISA added CVE-2024-23692 (Rejetto HTTP File Server) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to iThome, two listed companies in Taiwan disclosed cybersecurity incidents on July 8: major electrical equipment manufacturer TECO Electric & Machinery first issued a material cybersecurity announcement on MOPS, followed the same day by its logistics subsidiary Taiwan Pelican Express .