18 results
BleepingComputer reports that ConnectWise is investigating an active campaign targeting managed service providers that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices .
Microsoft Threat Intelligence said on November 5, 2026 that since August it has seen threat actors use an agentic AI offensive framework to search public GitHub repositories for credentials, application credentials and AI inference API keys, then use them for further malicious activity against victim organizations .
On 2026-04-13, CISA added CVE-2025-60710 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2021-43226 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-08, CISA added CVE-2025-29824 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-11, CISA added CVE-2025-26633 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-03, CISA added CVE-2018-8639 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-11-12, CISA added CVE-2024-49039 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-10-15, CISA added CVE-2024-30088 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-09, CISA added CVE-2017-1000253 (Linux Kernel) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-06-13, CISA added CVE-2024-26169 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-05-30, CISA added CVE-2024-1086 (Linux Kernel) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-03-04, CISA added CVE-2024-21338 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On February 22, 2024, CISA added ConnectWise ScreenConnect vulnerability CVE-2024-1709 to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-02-13, CISA added CVE-2024-21412 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-02-07, CISA, NSA, and the FBI issued a joint advisory attributing confirmed intrusions into U.
In early 2024, Microsoft published incident response guidance regarding activity by threat actor Midnight Blizzard .
On 2024-01-16, the FBI and CISA released a joint cybersecurity advisory detailing indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with Androxgh0st malware .