12 results
Microsoft Threat Intelligence said on November 5, 2026 that since August it has seen threat actors use an agentic AI offensive framework to search public GitHub repositories for credentials, application credentials and AI inference API keys, then use them for further malicious activity against victim organizations .
On 2026-04-13, CISA added CVE-2025-60710 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2021-43226 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-08, CISA added CVE-2025-29824 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-11, CISA added CVE-2025-26633 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-03, CISA added CVE-2018-8639 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-11-12, CISA added CVE-2024-49039 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-10-15, CISA added CVE-2024-30088 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-06-13, CISA added CVE-2024-26169 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-03-04, CISA added CVE-2024-21338 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-02-13, CISA added CVE-2024-21412 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) Catalog .
In early 2024, Microsoft published incident response guidance regarding activity by threat actor Midnight Blizzard .