221 results
BleepingComputer reports that ConnectWise is investigating an active campaign targeting managed service providers that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices .
Microsoft Threat Intelligence said on November 5, 2026 that since August it has seen threat actors use an agentic AI offensive framework to search public GitHub repositories for credentials, application credentials and AI inference API keys, then use them for further malicious activity against victim organizations .
CISA, the FBI, the US Secret Service and international partners released a joint advisory warning that SafePay is one of the most active ransomware groups of 2026, impacting about 600 victims across the Americas, Europe and Australia .
An alert from France's CERT-FR warned of widespread compromises affecting Danfoss AK-SM/AK-SC and Copeland/Dixell XWEB refrigeration remote controllers, with attackers primarily exploiting internet-exposed management interfaces .
CISA, the FBI, the NSA and international partners warned that Integrity Technology Group, a China-based cybersecurity company with ties to the Chinese government, is enabling threat actors to target multiple critical infrastructure sectors worldwide .
On 2026-09-25, CISA added CVE-2026-65660 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-22, CISA added CVE-2026-93616 (Check Point Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-22, CISA added CVE-2026-85102 (Check Point Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-16, CISA added CVE-2026-76460 (Cisco Identity Services Engine) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-14, CISA added CVE-2026-76461 (Cisco Secure Email Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-85706 (GitLab Community Edition and Enterprise Edition) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-84869 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-09, CISA added CVE-2026-19490 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-09-09, CISA added CVE-2026-20079 (Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-09-09, CISA added CVE-2025-25249 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-02, CISA added CVE-2026-83549 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-02, CISA added CVE-2026-83548 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-26, CISA added CVE-2026-8452 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-59310 (Broadcom VMware vCenter) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-55040 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .