CriticalVulnerabilityMonitoringBackfillExploitedKEVEPSS 85%CVE-2023-24955· updated Nov 8
On 2024-03-26, CISA added CVE-2023-24955 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
731 results
On 2024-03-26, CISA added CVE-2023-24955 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-03-25, CISA added CVE-2023-48788 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-03-25, CISA added CVE-2021-44529 (Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)) to its Known Exploited Vulnerabilities (KEV) catalog .
Cybersecurity media outlets reported that multiple Ukrainian internet service providers (ISPs) were hit by cyberattacks causing connectivity disruptions .
According to iThome, as publicly traded companies in Taiwan face frequent cyberattacks, how enterprises determine whether a cybersecurity incident is material enough to require public disclosure has been a key question over the past two years .
On 2024-03-04, CISA added CVE-2024-21338 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
In March 2024, JetBrains disclosed CVE-2024-27198, an authentication bypass vulnerability affecting TeamCity On-Premises servers .
The City of Hamilton in Ontario, Canada published cybersecurity incident updates stating that municipal IT systems had been hit by a cyberattack .
On February 22, 2024, CISA added ConnectWise ScreenConnect vulnerability CVE-2024-1709 to its Known Exploited Vulnerabilities (KEV) catalog .
In February 2024, UnitedHealth Group publicly disclosed that its subsidiary Change Healthcare had suffered a cyberattack, disrupting related healthcare claims and payment services .
On 2024-02-15, CISA added CVE-2024-21410 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-02-15, CISA added CVE-2020-3259 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)) to its Known Exploited Vulnerabilities (KEV) catalog .
France's National Commission on Informatics and Liberty (CNIL) announced that two third-party healthcare payment operators suffered data breaches and that it has opened an investigation .
On 2024-02-13, CISA added CVE-2024-21412 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to LOG, citing a public announcement from Turkey's Personal Data Protection Authority (KVKK), Karel İletişim suffered a ransomware attack on February 3, 2024 .
Fortinet published a security advisory detailing CVE-2024-21762, a vulnerability in FortiOS that can lead to remote code execution .
On 2024-02-07, CISA, NSA, and the FBI issued a joint advisory attributing confirmed intrusions into U.
On 2024-01-31, CISA added CVE-2024-21893 (Ivanti Connect Secure, Policy Secure, and Neurons) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Caracol Radio, Colombian healthcare provider Salud Total EPS suffered an external cyberattack on January 27, 2024 that impacted its IT servers .
On 2024-01-24, CISA added CVE-2023-22527 (Atlassian Confluence Data Center and Server) to its Known Exploited Vulnerabilities (KEV) catalog .