19 casos · pág. 1/1
The NSA, CISA, FBI, DOE and EPA issued a joint advisory (AA26-231A) warning of an active threat to Siemens S7 Series PLCs in U.S. critical infrastructure. Unattributed threat actors are conducting reconnaissance and capability development against U.S.-based installations using AI-generated exploitation scripts disguised as legitimate OT m…
CISA added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Two affect JFrog Artifactory: CVE-2026-42016 (incorrect authorization) and CVE-2026-42018 (improper authentication). The third is CVE-2026-84869 in ConnectWise ScreenConnect (improper privilege management and mis…
CISA added two Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2025-39964, a race condition flaw, and CVE-2026-53266, an out-of-bounds write flaw. CISA describes these vulnerability types as a frequent attack vector for malicious cyber actors and a significant…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-16 based on evidence of active exploitation: CVE-2026-58704, an improper authorization vulnerability in Google Pixel. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the feder…
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-65660, a code injection flaw in Microsoft SharePoint, and CVE-2026-67279, an improper enforcement of behavioral workflow flaw in MikroTik RouterOS. CISA describes these vulnerability types as a frequent at…
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-5430, a path traversal flaw in multiple WSO2 products, and CVE-2026-71362, an incorrect authorization flaw in Adobe Commerce and Magento. CISA describes these vulnerability types as a frequent attack vecto…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-18 based on evidence of active exploitation: CVE-2025-39682, an Improper Check for Unusual or Exceptional Conditions flaw in the Linux Kernel. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a sign…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-01, citing evidence of active exploitation: CVE-2026-104286, a path traversal flaw in Fortinet FortiMail. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the federal enterpris…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-29, citing evidence of active exploitation: CVE-2026-86950, an out-of-bounds write flaw affecting multiple Apple products. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-30, citing evidence of active exploitation: CVE-2026-76504, a hex encoding vulnerability in Cisco Catalyst SD-WAN Manager. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-96951, a command injection flaw in Microsoft Windows, and CVE-2026-104935, an authentication bypass by spoofing in Ivanti Connect Secure. CISA describes these vulnerability types as a frequent attack vecto…
CISA added two Zammad GmbH Zammad vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-102489, a session fixation flaw, and CVE-2026-102490, an improper privilege management flaw. CISA describes these vulnerability types as frequent attack vectors for malicious cyber actor…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-15, citing evidence of active exploitation: CVE-2026-21589, an Atlassian Multiple Products flaw in which files or directories are accessible to external parties. CISA describes this vulnerability type as a frequent attack vector for malicious cybe…
A joint advisory (AA26-194a) from NSA, CISA, FBI, DC3 and 15 allied agencies warns that Russian FSB Center 16 cyber actors continue to opportunistically compromise poorly configured and vulnerable networking devices worldwide, primarily routers. The advisory builds on the FBI's August 2025 PSA on the decade-plus campaign and adds TTPs. Go…
The NSA, CISA and FBI issued joint advisory AA26-251A warning that China-based AI companies are running industrial-scale knowledge distillation campaigns against U.S. frontier AI models. The named companies are DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI. According to the agencies, they have extracted billions of tokens acro…
A joint advisory (AA26-281A) attributes China-based malicious cyber activity to Integrity Technology Group (Integrity Tech), a for-profit company with links to the Chinese government. The company builds and sells tools, hosts infrastructure and compromises networks worldwide. The actors' TTPs are consistent with Flax Typhoon, Ethereal Pan…
A joint StopRansomware advisory (AA26-293A) from the FBI, CISA, USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026. SafePay has been highly active since August 2024 and was among the most active …
A joint advisory (AA25-343A) from FBI, CISA, NSA and some 18 other US, European, Five Eyes and Czech agencies warns that pro-Russia hacktivist groups are conducting opportunistic, low-sophistication attacks on critical infrastructure OT. The groups named are Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057(16) and Sector16. They e…
A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…
