CriticalVulnerabilityMonitoringBackfillExploitedKEVEPSS 29%CVE-2025-14733· updated Nov 8
On 2025-12-19, CISA added CVE-2025-14733 (WatchGuard Firebox) to its Known Exploited Vulnerabilities (KEV) catalog .
730 results
On 2025-12-19, CISA added CVE-2025-14733 (WatchGuard Firebox) to its Known Exploited Vulnerabilities (KEV) catalog .
In an assessment published on December 18, 2025, the Danish Defence Intelligence Service (DDIS / FE) stated that Russia was responsible for a destructive cyberattack against a Danish water utility in 2024 .
The Danish Defence Intelligence Service (DDIS) assessed that Danish websites were targeted by a series of denial-of-service attacks in the run-up to the 2025 municipal and regional council elections .
On 2025-12-17, CISA added CVE-2025-40602 (SonicWall SMA1000 appliance) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-17, CISA added CVE-2025-20393 (Cisco Multiple Products) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-12-16, CISA added CVE-2025-59718 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-05, CISA added CVE-2025-55182 (Meta React Server Components) to its Known Exploited Vulnerabilities (KEV) catalog .
South Korea's Personal Information Protection Commission found that failures in managing authentication signing keys and access controls at Coupang led to the leak of about 37.
On 2025-11-18, CISA added CVE-2025-58034 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-11-14, CISA added CVE-2025-64446 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Korea Herald, an investigation revealed that KT servers had been infected with malware and that the company failed to promptly notify regulatory authorities .
On 2025-10-30, CISA added CVE-2025-41244 (Broadcom VMware Aria Operations and VMware Tools) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-10-20, CISA added CVE-2025-61884 (Oracle E-Business Suite) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2025-61882 (Oracle E-Business Suite) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2021-43226 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Jerusalem Post, Shamir Medical Center suffered a cyberattack involving hospital email correspondence that leaked emails containing patient information .
According to Asharq Al-Awsat, citing a stock exchange filing by Al-Babtain, a secondary server at its Egyptian subsidiary suffered a cyber intrusion .
On 2025-09-29, CISA added CVE-2025-20352 (Cisco IOS and IOS XE) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-09-29, CISA added CVE-2025-10035 (Fortra GoAnywhere MFT) to its Known Exploited Vulnerabilities (KEV) catalog .
Diamond Electric Holdings announced that its Thai subsidiary suffered unauthorized access on September 8, 2025, resulting in local servers and several personal computers being encrypted by ransomware .