54 results
BleepingComputer reports that ConnectWise is investigating an active campaign targeting managed service providers that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices .
Microsoft Threat Intelligence said on November 5, 2026 that since August it has seen threat actors use an agentic AI offensive framework to search public GitHub repositories for credentials, application credentials and AI inference API keys, then use them for further malicious activity against victim organizations .
On 2026-09-25, CISA added CVE-2026-65660 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-85706 (GitLab Community Edition and Enterprise Edition) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-84869 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-55040 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-33824 (Microsoft Internet Key Exchange (IKE) Service Extensions) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-07, CISA added CVE-2026-8037 (Progress LoadMaster) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-07-22, CISA added CVE-2026-50522 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-07-16, CISA added CVE-2026-58644 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-07-14, CISA added CVE-2026-56164 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-07-01, CISA added CVE-2026-45659 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-05-15, CISA added CVE-2026-42897 (Microsoft Microsoft) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-28, CISA added CVE-2024-1708 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-22, CISA added CVE-2026-33825 (Microsoft Defender) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-14, CISA added CVE-2026-32201 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-13, CISA added CVE-2025-60710 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-13, CISA added CVE-2023-21529 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-18, CISA added CVE-2026-20963 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-18, CISA added CVE-2021-22175 (GitLab GitLab) to its Known Exploited Vulnerabilities (KEV) catalog .