On 2026-09-09, CISA added CVE-2026-20079 (Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management) to its Known Exploited Vulnerabilities (KEV) Catalog .
729 results
On 2026-09-09, CISA added CVE-2026-20079 (Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-09-09, CISA added CVE-2025-25249 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
According to fuitededonnées.
Veradigm told the SEC that one of its third-party vendors suffered a cybersecurity incident in which an unauthorized party obtained credentials to a Veradigm API from the vendor's environment, affecting data of a small number of customers .
According to BleepingComputer, an Advance Passenger Information System (APIS) database linked to a Vietnamese organization was accessible online through chained misconfigurations, holding about 220 million passenger and crew records from January 2017 to April 2026, including passport numbers and flight details .
According to iThome, some servers at Fullerton Technology subsidiary GDC Holdings were hit by a ransomware attack on September 7 .
Meteor GmbH said unknown attackers breached its IT systems on the night of August 11, 2026, encrypted data with malware, copied data and are threatening to publish it online .
Weverse, the fan platform of South Korea's HYBE, said that on September 3 the Korea Internet & Security Agency told it an outside party had reported a vulnerability, and an inspection confirmed data of 422,584 accounts leaked .
Mathspace said attackers exploited a vulnerability in its self-hosted Metabase internal reporting system to gain admin access, with access dating back to August 10 and data downloaded from its Australian reporting database on August 27; Metabase had released patches on August 6, but Mathspace only updated on August 29 .
IDScan.
According to iThome, on the evening of September 2, TPEx-listed semiconductor equipment manufacturer Innovation Service (7828) issued a cybersecurity material announcement on the Market Observation Post System (MOPS), stating that it detected a ransomware attack on some of its servers and immediately activated defense mechanisms, network disconnection, and isolation measures upon detecting the anomaly, while launching cybersecurity incident response procedures to comprehensively review security systems and strengthen protections .
According to iThome, on the evening of September 1, emerging stock semiconductor IP company InPsytech (7898) issued a cybersecurity material announcement on the Market Observation Post System (MOPS), stating that its ERP system suffered a hacker encryption attack; after its information security unit detected anomalies in the ERP system and confirmed an encryption attack, it immediately launched comprehensive inspections, incident investigations, and protective operations, and is continuing to verify the scope of impact and conduct root cause analysis .
On 2026-09-02, CISA added CVE-2026-83549 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-02, CISA added CVE-2026-83548 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
According to iThome, Hunt Electronic announced on August 31 that its information systems suffered a cyberattack .
According to iThome, Compucase Enterprise announced on August 30 that some of its information systems experienced a cybersecurity incident .
According to iThome, Fuhua Enterprise announced on August 30 that it detected a cyberattack on some of its information systems .
US drug distributor McKesson said in an SEC 8-K filing that it discovered a cybersecurity incident affecting its information systems on August 25 and that the investigation is in its early stages .
The UK NCSC says it has seen increased targeting of operational technology systems across multiple sectors globally, including in the UK, by a range of threat actors, resulting in some limited real-world disruption .
Manchester Airports Group (MAG) confirmed on August 27 that an unauthorized third party obtained customer data tied to car park, lounge and Fast Track bookings and in-airport Wi-Fi sign-ups at Manchester, Stansted and East Midlands airports, including email addresses, phone numbers, vehicle registrations and postcodes .