Organization
CISA, the FBI, the US Secret Service and international partners released a joint advisory warning that SafePay is one of the most active ransomware groups of 2026, impacting about 600 victims across the Americas, Europe and Australia .
An alert from France's CERT-FR warned of widespread compromises affecting Danfoss AK-SM/AK-SC and Copeland/Dixell XWEB refrigeration remote controllers, with attackers primarily exploiting internet-exposed management interfaces .
CISA, the FBI, the NSA and international partners warned that Integrity Technology Group, a China-based cybersecurity company with ties to the Chinese government, is enabling threat actors to target multiple critical infrastructure sectors worldwide .
On 2026-09-25, CISA added CVE-2026-65660 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-22, CISA added CVE-2026-93616 (Check Point Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-22, CISA added CVE-2026-85102 (Check Point Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-16, CISA added CVE-2026-76460 (Cisco Identity Services Engine) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-14, CISA added CVE-2026-76461 (Cisco Secure Email Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-85706 (GitLab Community Edition and Enterprise Edition) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-84869 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-09, CISA added CVE-2026-19490 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-09-09, CISA added CVE-2026-20079 (Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-09-09, CISA added CVE-2025-25249 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-02, CISA added CVE-2026-83549 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-02, CISA added CVE-2026-83548 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-26, CISA added CVE-2026-8452 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-59310 (Broadcom VMware vCenter) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-55040 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-33824 (Microsoft Internet Key Exchange (IKE) Service Extensions) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-11, CISA added CVE-2026-20349 (Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)) to its Known Exploited Vulnerabilities (KEV) catalog .