The weekly archive
What happened in security leadership, one week at a time, from January 2022. Every page was compiled on or after September 27, 2026 from public records and is labelled that way; none of it is presented as a briefing that went out at the time. 187 weeks are compiled so far, and more are added as each one is sourced and checked.
2026 · 7 weeks compiled
Week 3 · Jan 12 – Jan 18, 2026Week of January 12, 2026: IonQ and Cbus name CISOs, and Microsoft disrupts the RedVDS fraud service
Week 9 · Feb 23 – Mar 1, 2026Week of February 23, 2026: Cisco SD-WAN zero-day dates to 2023, and CISA orders emergency fixes
Week 15 · Apr 6 – Apr 12, 2026Week of April 6, 2026: Iranian actors disrupt US PLCs, and Stryker calls its March incident material
Week 21 · May 18 – May 24, 2026Week of May 18, 2026: TeamPCP breaches GitHub's internal repos, and the DBIR puts exploitation first
Week 27 · Jun 29 – Jul 5, 2026Week of June 29, 2026: AdaptHealth and Navient file 8-Ks, and a SimpleHelp bypass delivers Djinn Stealer
Week 33 · Aug 10 – Aug 16, 2026Week of August 10, 2026: Ralph Lauren and Tricentis hire CISOs, and a Metabase zero-day exposes customer data
Week 39 · Sep 21 – Sep 27, 2026Week of September 21, 2026: Zyxel switches and WordPress under attack, and the MSC names a CISO
2025 · 26 weeks compiled
Week 2 · Jan 6 – Jan 12, 2025Week of January 6, 2025: Treasury-BeyondTrust Breach and Ivanti VPN Zero-Day Dominate
Week 3 · Jan 13 – Jan 19, 2025Week of January 13, 2025: FortiGate zero-day and config leak, and the FBI deletes PlugX
Week 4 · Jan 20 – Jan 26, 2025Week of January 20, 2025: CISA's Ivanti Advisory and New KEV Additions
Week 5 · Jan 27 – Feb 2, 2025Week of January 27, 2025: Contec Monitor Backdoor, SonicWall Flaw Under Attack
Week 6 · Feb 3 – Feb 9, 2025Week of February 3, 2025: Atlassian Names New CISO, CISA Flags Trimble Cityworks Exploit
Week 7 · Feb 10 – Feb 16, 2025Week of February 10, 2025: 8Base leak site seized, and Microsoft patches two exploited zero-days
Week 8 · Feb 17 – Feb 23, 2025Week of February 17, 2025: Ghost Ransomware Alert and DoD CISO Return
Week 9 · Feb 24 – Mar 2, 2025Week of February 24, 2025: CISA Advisories, DISA Breach Disclosure, and M365 Botnet
Week 10 · Mar 3 – Mar 9, 2025Week of March 3, 2025: BianLian Extortion Mailers and Dual Ransomware Disclosures
Week 11 · Mar 10 – Mar 16, 2025Week of March 10, 2025: Medusa Ransomware Advisory and CISA's KEV Catalog Additions
Week 12 · Mar 17 – Mar 23, 2025Week of March 17, 2025: GitHub Actions Supply-Chain Compromise and New CISO Appointments
Week 13 · Mar 24 – Mar 30, 2025Week of March 24, 2025: Oracle Cloud breach samples check out, and Chrome fixes a sandbox escape zero-day
Week 14 · Mar 31 – Apr 6, 2025Week of March 31, 2025: Ivanti Zero-Day Alert and Fast Flux Threat Advisory
Week 15 · Apr 7 – Apr 13, 2025Week of April 7, 2025: Sensata Ransomware Disclosure, Krebs Clearance Revoked
Week 16 · Apr 14 – Apr 20, 2025Week of April 14, 2025: The CVE program nearly loses its contract, and Conduent reports stolen client data
Week 17 · Apr 21 – Apr 27, 2025Week of April 21, 2025: CISA's ICS Advisory Wave and CVE Program Reassurance
Week 18 · Apr 28 – May 4, 2025Week of April 28, 2025: M&S Ransomware Attack and SAP NetWeaver Zero-Day Hit CISA's KEV List
Week 19 · May 5 – May 11, 2025Week of May 5, 2025: Masimo slows production after an intrusion, and LockBit's own panel is hacked
Week 20 · May 12 – May 18, 2025Week of May 12, 2025: Coinbase Extortion Disclosure, Nucor Production Halt
Week 21 · May 19 – May 25, 2025Week of May 19, 2025: CISA Deputy Director Named, Lumma Stealer Takedown
Week 23 · Jun 2 – Jun 8, 2025Week of June 2, 2025: New AWS, DTCC CISOs; CISA Updates Play Ransomware Advisory
Week 25 · Jun 16 – Jun 22, 2025Week of June 16, 2025: Scattered Spider turns to insurers as Aflac discloses a breach, and Nobitex is drained
Week 31 · Jul 28 – Aug 3, 2025Week of July 28, 2025: Palo Alto Networks bids $25 billion for CyberArk, and St. Paul calls in the Guard
Week 37 · Sep 8 – Sep 14, 2025Week of September 8, 2025: Phished npm maintainer poisons popular packages, and JLR confirms data theft
Week 43 · Oct 20 – Oct 26, 2025Week of October 20, 2025: A DNS race condition takes down AWS us-east-1, and WSUS gets an emergency patch
Week 49 · Dec 1 – Dec 7, 2025Week of December 1, 2025: React2Shell flaw hits the KEV list, and CISA details China's BRICKSTORM backdoor
2024 · 52 weeks compiled
Week 1 · Jan 1 – Jan 7, 2024Week of January 1, 2024: CISA Flags Exploited Flaws, Orrick Breach Grows to 638,000
Week 2 · Jan 8 – Jan 14, 2024Week of January 8, 2024: Ivanti zero-days under active exploitation and SEC's X account hijacked
Week 3 · Jan 15 – Jan 21, 2024Week of January 15, 2024: CISA's Ivanti Emergency Directive and Microsoft's Email Breach
Week 4 · Jan 22 – Jan 28, 2024Week of January 22, 2024: HPE's Midnight Blizzard Breach and Tietoevry's Akira Attack
Week 5 · Jan 29 – Feb 4, 2024Week of January 29, 2024: FBI dismantles Volt Typhoon's router botnet, and Ivanti gateways get two more flaws
Week 6 · Feb 5 – Feb 11, 2024Week of February 5, 2024: Volt Typhoon Warning, SouthState Bank Breach Disclosure
Week 7 · Feb 12 – Feb 18, 2024Week of February 12, 2024: Prudential Discloses Breach, Fortinet Zero-Day Exploited
Week 8 · Feb 19 – Feb 25, 2024Week of February 19, 2024: Police seize LockBit's infrastructure, and Change Healthcare is breached
Week 9 · Feb 26 – Mar 3, 2024Week of February 26, 2024: Ivanti Exploitation Warning and Cencora Breach Disclosure
Week 10 · Mar 4 – Mar 10, 2024Week of March 4, 2024: Change Healthcare Fallout, Microsoft's Widening Breach
Week 11 · Mar 11 – Mar 17, 2024Week of March 11, 2024: HHS opens a Change Healthcare HIPAA probe, and EU lawmakers pass the AI Act
Week 12 · Mar 18 – Mar 24, 2024Week of March 18, 2024: Volt Typhoon Warning and a Wave of Breach Disclosures
Week 13 · Mar 25 – Mar 31, 2024Week of March 25, 2024: XZ Utils Backdoor Surfaces as CISA Pushes New Cyber Rules
Week 14 · Apr 1 – Apr 7, 2024Week of April 1, 2024: Ivanti Gateway Flaws, MarineMax's Amended Breach Filing
Week 15 · Apr 8 – Apr 14, 2024Week of April 8, 2024: CISA's Midnight Blizzard Directive and a Palo Alto Zero-Day
Week 16 · Apr 15 – Apr 21, 2024Week of April 15, 2024: Frontier Breach Disclosure, Akira Ransomware Advisory
Week 17 · Apr 22 – Apr 28, 2024Week of April 22, 2024: Change Healthcare theft may cover much of the US, and ArcaneDoor hits Cisco ASA
Week 18 · Apr 29 – May 5, 2024Week of April 29, 2024: Dropbox Sign Breach, CISA's Directory Traversal Alert
Week 19 · May 6 – May 12, 2024Week of May 6, 2024: Black Basta Advisory, Key Tronic and Brandywine SEC Filings
Week 20 · May 13 – May 19, 2024Week of May 13, 2024: CISA's Eric Goldstein Departs, KEV Catalog Expands
Week 21 · May 20 – May 26, 2024Week of May 20, 2024: SEC's 30-day breach rule and the CyberArk-Venafi deal
Week 22 · May 27 – Jun 2, 2024Week of May 27, 2024: CISA Adds Four Exploited CVEs While CISO Moves Hit Synechron, ZeroFox
Week 23 · Jun 3 – Jun 9, 2024Week of June 3, 2024: Synnovis ransomware hits London hospitals, and CISA flags Snowflake account attacks
Week 24 · Jun 10 – Jun 16, 2024Week of June 10, 2024: CISA KEV Additions, Globe Life and Key Tronic Disclosures
Week 25 · Jun 17 – Jun 23, 2024Week of June 17, 2024: CISA Network Access Guidance, New CISOs at Reco and ARPA-H
Week 26 · Jun 24 – Jun 30, 2024Week of June 24, 2024: Indonesia Data Center Ransomware, Croatia Hospital Cyberattack
Week 27 · Jul 1 – Jul 7, 2024Week of July 1, 2024: Sonic Automotive Discloses CDK Fallout, CISA Flags Exploited Cisco Flaw
Week 28 · Jul 8 – Jul 14, 2024Week of July 8, 2024: AT&T Breach Disclosure and APT40 Advisory
Week 29 · Jul 15 – Jul 21, 2024Week of July 15, 2024: Faulty CrowdStrike update grounds Windows fleets, and Bassett files a ransomware 8-K
Week 30 · Jul 22 – Jul 28, 2024Week of July 22, 2024: LA County Courts Ransomware and North Korea Espionage Advisory
Week 31 · Jul 29 – Aug 4, 2024Week of July 29, 2024: VMware ESXi KEV Addition and Azure DDoS Outage
Week 32 · Aug 5 – Aug 11, 2024Week of August 5, 2024: BlackSuit Ransomware Advisory and New CISO Appointments
Week 33 · Aug 12 – Aug 18, 2024Week of August 12, 2024: CISA Adds SolarWinds Flaw to KEV, Microsoft Ships August Patches
Week 34 · Aug 19 – Aug 25, 2024Week of August 19, 2024: CISA Expands KEV Catalog, CISO-Adjacent Moves
Week 35 · Aug 26 – Sep 1, 2024Week of August 26, 2024: Volt Typhoon exploits a Versa Director zero-day, and CISA profiles RansomHub
Week 36 · Sep 2 – Sep 8, 2024Week of September 2, 2024: GRU Unit 29155 Advisory and Transport for London Cyberattack
Week 37 · Sep 9 – Sep 15, 2024Week of September 9, 2024: SonicWall, Ivanti flaws exploited; Microsoft patches four zero-days
Week 38 · Sep 16 – Sep 22, 2024Week of September 16, 2024: CISA's FOCAL Plan and Ivanti CSA Exploitation
Week 39 · Sep 23 – Sep 29, 2024Week of September 23, 2024: Ivanti KEV Addition, Telegram Data-Sharing Shift
Week 40 · Sep 30 – Oct 6, 2024Week of September 30, 2024: CISA Adds KEV Entries, Aembit Names New CISO
Week 41 · Oct 7 – Oct 13, 2024Week of October 7, 2024: American Water discloses a cyberattack, and the FTC settles with Marriott
Week 42 · Oct 14 – Oct 20, 2024Week of October 14, 2024: Iranian Brute-Force Advisory and CISO Moves at OpenAI, Keeper
Week 43 · Oct 21 – Oct 27, 2024Week of October 21, 2024: FortiManager Zero-Day Fallout and PRC Telecom Intrusion
Week 44 · Oct 28 – Nov 3, 2024Week of October 28, 2024: CISA's RDP Phishing Alert and Sophos's China Counter-Op
Week 45 · Nov 4 – Nov 10, 2024Week of November 4, 2024: CISA KEV Additions and Election Day Cybersecurity Assurances
Week 46 · Nov 11 – Nov 17, 2024Week of November 11, 2024: PRC Telecom Espionage Disclosed, KPMG Names New CISO
Week 47 · Nov 18 – Nov 24, 2024Week of November 18, 2024: PAN-OS zero-days compromise 2,000 firewalls, and ransomware halts Blue Yonder
Week 49 · Dec 2 – Dec 8, 2024Week of December 2, 2024: PRC Telecom Hack Guidance and ENGlobal Ransomware Disclosure
Week 50 · Dec 9 – Dec 15, 2024Week of December 9, 2024: Cleo Zero-Day Exploited, Krispy Kreme Discloses Cyber Incident
Week 51 · Dec 16 – Dec 22, 2024Week of December 16, 2024: CISA Cloud Directive and BeyondTrust Zero-Day
Week 52 · Dec 23 – Dec 29, 2024Week of December 23, 2024: CISA KEV Addition, LockBit Developer Charged
Week 1 · Dec 30 – Jan 5, 2025Week of December 30, 2024: Treasury discloses a BeyondTrust-linked breach, and OFAC sanctions Integrity Tech
2023 · 52 weeks compiled
Week 1 · Jan 2 – Jan 8, 2023Week of January 2, 2023: CISA ICS Advisories, Wabtec Breach, LockBit Port Threat
Week 2 · Jan 9 – Jan 15, 2023Week of January 9, 2023: Rackspace Breach Details Emerge, Microsoft Patches Zero-Day
Week 3 · Jan 16 – Jan 22, 2023Week of January 16, 2023: T-Mobile says API abuse hit 37 million accounts, and Yum! Brands reports ransomware
Week 4 · Jan 23 – Jan 29, 2023Week of January 23, 2023: CISA RMM Phishing Warning and K-12 Security Report
Week 5 · Jan 30 – Feb 5, 2023Week of January 30, 2023: Ukraine Wiper Surge and Critical OAuth, QNAP, Jira Flaws
Week 6 · Feb 6 – Feb 12, 2023Week of February 6, 2023: ESXiArgs Ransomware Spree and DPRK Ransomware Funding Advisory
Week 7 · Feb 13 – Feb 19, 2023Week of February 13, 2023: Microsoft, Apple Patch Exploited Zero-Days; CISA Expands KEV List
Week 8 · Feb 20 – Feb 26, 2023Week of February 20, 2023: CISA Retires US-CERT, Adds Three Vulnerabilities to KEV
Week 9 · Feb 27 – Mar 5, 2023Week of February 27, 2023: A new US cyber strategy shifts the burden to vendors, and DISH confirms ransomware
Week 10 · Mar 6 – Mar 12, 2023Week of March 6, 2023: CISA Expands KEV List, Pushes Secure-by-Design Tech
Week 11 · Mar 13 – Mar 19, 2023Week of March 13, 2023: CISA Launches Ransomware Pilot, LockBit 3.0 Advisory Drops
Week 12 · Mar 20 – Mar 26, 2023Week of March 20, 2023: CISA Ransomware Notifications and Cisco's Nine-Advisory Patch Batch
Week 13 · Mar 27 – Apr 2, 2023Week of March 27, 2023: 3CX Supply Chain Attack and New KEV Additions
Week 14 · Apr 3 – Apr 9, 2023Week of April 3, 2023: CISA Expands KEV Catalog as Cisco, ICS Advisories Land
Week 15 · Apr 10 – Apr 16, 2023Week of April 10, 2023: Allies publish secure-by-design principles, Microsoft fixes an exploited CLFS flaw
Week 16 · Apr 17 – Apr 23, 2023Week of April 17, 2023: CISA Chief of Staff Transition and APT28 Cisco Router Advisory
Week 17 · Apr 24 – Apr 30, 2023Week of April 24, 2023: 3CX Supply Chain Fallout Widens, CISA Issues Multiple Advisories
Week 18 · May 1 – May 7, 2023Week of May 1, 2023: CISA KEV additions and NFL Draft security deployment
Week 19 · May 8 – May 14, 2023Week of May 8, 2023: PaperCut Ransomware Alert and Russian Snake Malware Exposed
Week 20 · May 15 – May 21, 2023Week of May 15, 2023: CISA's BianLian Advisory and JD Sports' Interim CISO
Week 21 · May 22 – May 28, 2023Week of May 22, 2023: Five Eyes expose Volt Typhoon, and Barracuda email gateways hit through a zero-day
Week 22 · May 29 – Jun 4, 2023Week of May 29, 2023: MOVEit Transfer zero-day exploited, and Barracuda ESG attacks traced to 2022
Week 23 · Jun 5 – Jun 11, 2023Week of June 5, 2023: CL0P's MOVEit Mass-Exploitation and CISA's KEV Additions
Week 24 · Jun 12 – Jun 18, 2023Week of June 12, 2023: CISA's Management-Interface Directive and LockBit Advisory
Week 25 · Jun 19 – Jun 25, 2023Week of June 19, 2023: CISA KEV Additions and New Cybersecurity Division Leaders
Week 26 · Jun 26 – Jul 2, 2023Week of June 26, 2023: CISA DDoS Alert, KEV Additions, and Election Security Shake-Up
Week 27 · Jul 3 – Jul 9, 2023Week of July 3, 2023: Ransomware halts Japan's busiest port, and JumpCloud invalidates admin API keys
Week 28 · Jul 10 – Jul 16, 2023Week of July 10, 2023: Storm-0558 Outlook Breach Advisory and Revolut's $20M Fraud
Week 29 · Jul 17 – Jul 23, 2023Week of July 17, 2023: Citrix NetScaler Zero-Day, VirusTotal Data Leak
Week 30 · Jul 24 – Jul 30, 2023Week of July 24, 2023: The SEC adopts its cyber disclosure rules, and an Ivanti zero-day hits Norway
Week 31 · Jul 31 – Aug 6, 2023Week of July 31, 2023: Ivanti EPMM Zero-Days Exploited, CISA Publishes Strategic Plan
Week 32 · Aug 7 – Aug 13, 2023Week of August 7, 2023: Barracuda Backdoors and August Patch Tuesday
Week 33 · Aug 14 – Aug 20, 2023Week of August 14, 2023: Clorox discloses an IT intrusion, Colorado warns 4 million over IBM MOVEit breach
Week 34 · Aug 21 – Aug 27, 2023Week of August 21, 2023: WinRAR zero-day exploited, Seiko hit by ALPHV ransomware
Week 35 · Aug 28 – Sep 3, 2023Week of August 28, 2023: QakBot Takedown and Infamous Chisel Malware Exposed
Week 36 · Sep 4 – Sep 10, 2023Week of September 4, 2023: CISA Warns on ManageEngine Exploits, Microsoft Explains Stolen Key
Week 37 · Sep 11 – Sep 17, 2023Week of September 11, 2023: KEV Adds Apple & Chrome Flaws; CISA Issues OSS Roadmap
Week 38 · Sep 18 – Sep 24, 2023Week of September 18, 2023: Snatch Ransomware Advisory and CISA KEV Catalog Additions
Week 39 · Sep 25 – Oct 1, 2023Week of September 25, 2023: Johnson Controls hit by ransomware, and allies warn of BlackTech router implants
Week 40 · Oct 2 – Oct 8, 2023Week of October 2, 2023: NSA-CISA misconfigurations advisory, Confluence zero-day added to KEV
Week 41 · Oct 9 – Oct 15, 2023Week of October 9, 2023: HTTP/2 Rapid Reset Fallout and Citrix NetScaler Flaws
Week 42 · Oct 16 – Oct 22, 2023Week of October 16, 2023: Cisco IOS XE Zero-Day, Atlassian Confluence Under Attack
Week 43 · Oct 23 – Oct 29, 2023Week of October 23, 2023: Cisco IOS XE KEV Additions and Okta Breach Fallout
Week 44 · Oct 30 – Nov 5, 2023Week of October 30, 2023: Citrix Bleed Mass Exploitation and Biden's AI Executive Order
Week 45 · Nov 6 – Nov 12, 2023Week of November 6, 2023: Ransomware disrupts ICBC's US arm, and Clop affiliate exploits a SysAid zero-day
Week 46 · Nov 13 – Nov 19, 2023Week of November 13, 2023: Scattered Spider Advisory, Rhysida Ransomware Guidance
Week 47 · Nov 20 – Nov 26, 2023Week of November 20, 2023: Citrix Bleed Hits Boeing, CISA-NCSC Unveil Secure AI Guidelines
Week 48 · Nov 27 – Dec 3, 2023Week of November 27, 2023: IRGC PLC Attacks on Water Utilities and Slovenian Power Ransomware
Week 49 · Dec 4 – Dec 10, 2023Week of December 4, 2023: Star Blizzard Advisory and ColdFusion Government Breach
Week 50 · Dec 11 – Dec 17, 2023Week of December 11, 2023: Russian SVR TeamCity Exploitation and CISA's Secure by Design Push
Week 51 · Dec 18 – Dec 24, 2023Week of December 18, 2023: SEC incident rule takes effect with VF's 8-K, and the FBI disrupts ALPHV/BlackCat
Week 52 · Dec 25 – Dec 31, 2023Week of December 25, 2023: First American's Cyber Incident Update and MFA Bypass Warnings
2022 · 50 weeks compiled
Week 1 · Jan 3 – Jan 9, 2022Week of January 3, 2022: FTC puts Log4j patching on notice, and FinalSite ransomware takes schools offline
Week 2 · Jan 10 – Jan 16, 2022Week of January 10, 2022: Russian Threat Advisory and Ukraine Wiper Malware Surface
Week 3 · Jan 17 – Jan 23, 2022Week of January 17, 2022: Ukraine wiper malware, CISA's urgent guidance
Week 5 · Jan 31 – Feb 6, 2022Week of January 31, 2022: CISA Adds Win32k Flaw to KEV; Citrix Agrees to $16.5B Buyout
Week 6 · Feb 7 – Feb 13, 2022Week of February 7, 2022: CISA's Shields Up Debut and SAP ICM Critical Flaws
Week 7 · Feb 14 – Feb 20, 2022Week of February 14, 2022: Russian hackers mine defense contractors, and DDoS hits Ukraine's banks
Week 8 · Feb 21 – Feb 27, 2022Week of February 21, 2022: Cyber attacks accompany Russia's invasion of Ukraine, and Cyclops Blink is exposed
Week 9 · Feb 28 – Mar 6, 2022Week of February 28, 2022: CISA's 95-Vulnerability KEV Update and Daxin Backdoor Disclosure
Week 10 · Mar 7 – Mar 13, 2022Week of March 7, 2022: Dirty Pipe Patches and Google's $5.4B Mandiant Deal
Week 11 · Mar 14 – Mar 20, 2022Week of March 14, 2022: Russian actors abuse default MFA settings, and ransomware hits the auto industry
Week 12 · Mar 21 – Mar 27, 2022Week of March 21, 2022: Lapsus$ hits Okta, Microsoft; CISA adds 66 KEVs
Week 13 · Mar 28 – Apr 3, 2022Week of March 28, 2022: Spring4Shell surfaces, and $620 million drained from the Ronin bridge
Week 14 · Apr 4 – Apr 10, 2022Week of April 4, 2022: Spring4Shell Hits CISA's KEV List, FBI Disrupts Cyclops Blink Botnet
Week 15 · Apr 11 – Apr 17, 2022Week of April 11, 2022: ICS/SCADA APT Tools Surface, Microsoft and VMware Rush Patches
Week 16 · Apr 18 – Apr 24, 2022Week of April 18, 2022: Russian Critical-Infrastructure Advisory and BlackCat Ransomware IOCs
Week 17 · Apr 25 – May 1, 2022Week of April 25, 2022: CISA/FBI Update Ukraine Wiper Advisory, Add 7 KEVs
Week 18 · May 2 – May 8, 2022Week of May 2, 2022: F5 BIG-IP Flaw and Five New KEV Entries, Ransomware Hits Colleges
Week 19 · May 9 – May 15, 2022Week of May 9, 2022: EU negotiators agree NIS2, and the US ties SATCOM attacks to Russia
Week 20 · May 16 – May 22, 2022Week of May 16, 2022: CISA's VMware Emergency Directive and F5 BIG-IP Alert
Week 21 · May 23 – May 29, 2022Week of May 23, 2022: Broadcom's $61B VMware deal and GM/Zola account hijackings
Week 22 · May 30 – Jun 5, 2022Week of May 30, 2022: Follina and Confluence Zero-Days Dominate CISA Advisories
Week 23 · Jun 6 – Jun 12, 2022Week of June 6, 2022: PRC Network-Device Exploits and CISA's KEV Catalog Expansion
Week 24 · Jun 13 – Jun 19, 2022Week of June 13, 2022: Microsoft's June Patches Meet a New CISA Known Exploited Vulnerability
Week 25 · Jun 20 – Jun 26, 2022Week of June 20, 2022: Log4Shell still hits VMware Horizon, and Conti takes its last servers offline
Week 26 · Jun 27 – Jul 3, 2022Week of June 27, 2022: CISA Expands KEV Catalog, Warns on MedusaLocker Ransomware
Week 27 · Jul 4 – Jul 10, 2022Week of July 4, 2022: Maui Ransomware Advisory and NIST's Post-Quantum Algorithms
Week 28 · Jul 11 – Jul 17, 2022Week of July 11, 2022: July Patch Tuesday Lands; CISA Adds New KEV Entry
Week 29 · Jul 18 – Jul 24, 2022Week of July 18, 2022: Confluence Zero-Day Alert and Oracle's 349-Bug Patch Update
Week 30 · Jul 25 – Jul 31, 2022Week of July 25, 2022: CISA Flags New KEV and Log4Shell Exploit; Everbridge Names New CEO
Week 31 · Aug 1 – Aug 7, 2022Week of August 1, 2022: Attack on supplier Advanced disrupts NHS 111, and German chambers go dark
Week 32 · Aug 8 – Aug 14, 2022Week of August 8, 2022: Cisco Confirms Ransomware Breach, Twilio Discloses Phishing Incident
Week 33 · Aug 15 – Aug 21, 2022Week of August 15, 2022: CISA's Zimbra Alert and Apple's Zero-Day Fixes
Week 34 · Aug 22 – Aug 28, 2022Week of August 22, 2022: 0ktapus Phishing Fallout and New CISA KEV Additions
Week 35 · Aug 29 – Sep 4, 2022Week of August 29, 2022: Apple Patches Exploited iOS Flaw, CISA Issues ICS Advisories
Week 36 · Sep 5 – Sep 11, 2022Week of September 5, 2022: Vice Society Ransomware Alert, Go-Ahead Cyberattack
Week 37 · Sep 12 – Sep 18, 2022Week of September 12, 2022: Uber breached via an MFA prompt, and OMB demands secure-software attestations
Week 38 · Sep 19 – Sep 25, 2022Week of September 19, 2022: Iran's Albania Wiper Attacks, Uber's Lapsus$ Breach
Week 39 · Sep 26 – Oct 2, 2022Week of September 26, 2022: Exchange Zero-Days Surface, Sophos Firewall RCE Exploited
Week 40 · Oct 3 – Oct 9, 2022Week of October 3, 2022: CISA's Asset Directive and a DIB Espionage Breach Disclosed
Week 41 · Oct 10 – Oct 16, 2022Week of October 10, 2022: Patch Tuesday Exploits and Multibillion-Dollar Security M&A
Week 42 · Oct 17 – Oct 23, 2022Week of October 17, 2022: Daixin Team Ransomware Advisory and Apache Commons Text Flaw
Week 43 · Oct 24 – Oct 30, 2022Week of October 24, 2022: Medibank says every customer's data was accessed, and OpenSSL flags a critical fix
Week 44 · Oct 31 – Nov 6, 2022Week of October 31, 2022: OpenSSL Patches Critical Flaws, Dropbox Discloses GitHub Breach
Week 45 · Nov 7 – Nov 13, 2022Week of November 7, 2022: Medibank's Ransom Refusal and a Zero-Day-Heavy Patch Tuesday
Week 46 · Nov 14 – Nov 20, 2022Week of November 14, 2022: Hive Ransomware Advisory and Iranian APT Federal Breach
Week 47 · Nov 21 – Nov 27, 2022Week of November 21, 2022: CISA's KEV Update and the Hive Ransomware Advisory
Week 48 · Nov 28 – Dec 4, 2022Week of November 28, 2022: Cuba Ransomware Advisory and CISA ICS/KEV Alerts
Week 49 · Dec 5 – Dec 11, 2022Week of December 5, 2022: Rackspace ties its Exchange outage to ransomware, and Apple expands iCloud E2EE
Week 50 · Dec 12 – Dec 18, 2022Week of December 12, 2022: FortiOS Zero-Day, Citrix ADC State-Sponsored Exploit
Week 51 · Dec 19 – Dec 25, 2022Week of December 19, 2022: LastPass Confirms Vault Theft, New Exchange Exploit Chain Surfaces