CriticalVulnerabilityMonitoringBackfillExploitedKEVEPSS 13%CVE-2025-42999· updated Nov 8
On 2025-05-15, CISA added CVE-2025-42999 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
731 results
On 2025-05-15, CISA added CVE-2025-42999 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-14, CISA added CVE-2025-32756 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-05, CISA added CVE-2025-3248 (Langflow Langflow) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to El Tiempo, citing confirmation from the head of the Piura Tax Administration Service (SAT Piura), its tax information system was attacked on March 29, 2025, with the attackers demanding payment in Bitcoin .
On 2025-05-01, CISA added CVE-2024-38475 (Apache HTTP Server) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-05-01, CISA added CVE-2023-44221 (SonicWall SMA100 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-29, CISA added CVE-2025-31324 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-28, CISA added CVE-2025-1976 (Broadcom Brocade Fabric OS) to its Known Exploited Vulnerabilities (KEV) catalog .
South Korea's Ministry of Science and ICT (MSIT) issued a statement regarding the cybersecurity incident at SK Telecom .
Marks & Spencer disclosed a cybersecurity incident in April 2025 and implemented system isolation and operational adjustments .
On 2025-04-16, CISA added CVE-2021-20035 (SonicWall SMA100 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Lawyard, NIBSS applied to the Federal High Court in Lagos to freeze recipient accounts in order to recover funds from unauthorized transfers .
According to The Nation, citing Thailand's personal data protection regulator, Bangchak discovered unauthorized access to its customer feedback system on April 9, 2025 .
According to France 24, Morocco's National Social Security Fund (CNSS) suffered a cyberattack in which data belonging to nearly two million citizens was reportedly taken .
On 2025-04-08, CISA added CVE-2025-29824 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-07, CISA added CVE-2025-31161 (CrushFTP CrushFTP) to its Known Exploited Vulnerabilities (KEV) Catalog .
The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) issued a joint statement regarding a ransomware attack on printing vendor Toppan Next Tech .
On 2025-04-04, CISA added CVE-2025-22457 (Ivanti Connect Secure, Policy Secure, and ZTA Gateways) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to CCTV, citing a report from China's National Computer Virus Emergency Response Center (CVERC), information systems for the Asian Winter Games experienced a large volume of cyberattack attempts between January 26 and February 14, 2025 .
According to iThome, CrazyHunter, which specifically targets Taiwan, struck again in an attack aimed at a Taiwanese corporate group—affecting Netronix, Analog Integrations, and its subsidiary Zunidata Systems, making three companies in the group victims .