Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Nordic IT services provider Tietoevry announced that one of its data centers in Sweden was hit by a ransomware attack during the night of January 19–20, 2024 .
In early 2024, Microsoft published incident response guidance regarding activity by threat actor Midnight Blizzard .
On 2024-01-18, CISA added CVE-2023-35082 (Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-17, CISA added CVE-2023-6549 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-17, CISA added CVE-2023-6548 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-01-16, the FBI and CISA released a joint cybersecurity advisory detailing indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with Androxgh0st malware .
On 2024-01-10, CISA added CVE-2023-29357 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On January 10, 2024, CISA issued an alert warning that Ivanti Connect Secure and Policy Secure contain vulnerabilities CVE-2023-46805 and CVE-2024-21887 .
On 2024-01-08, CISA added CVE-2023-38203 (Adobe ColdFusion) to its Known Exploited Vulnerabilities (KEV) catalog .
On January 8, 2024, CISA added CVE-2023-29300 (Adobe ColdFusion) to its Known Exploited Vulnerabilities (KEV) catalog .