Skip to content
Edition of Sunday, October 25, 2026
Daily CISO

The five-minute briefing for security leaders.

Vendor news

What happened to security vendors

Which Daily CISO items were about the companies that sell security products? These 301 items from the daily briefings and the weekly archive cover 45 vendors: deals, exploited flaws in their products, and incidents they disclosed, newest month first.

Each headline links to the item on this site. Each company name links to its one record on CISO Tribune’s vendor directory, which lists what it sells and who owns it. Daily CISO keeps no vendor pages of its own.

No vendor pays to appear here or to change what we write. An item is listed when the vendor is named in its headline, is the subject of the disclosure, or makes the affected product; passing mentions are left out. Vendor list as of September 27, 2026.

October 2026 · 35 items

  1. Daily briefing · October 25, 2026

    Token-Replay Campaign Compromised Microsoft 365 Accounts at 79 Organizations

  2. Daily briefing · October 24, 2026

    CISA reinforces urgent patching for critical php2shell PHP flaws

  3. Daily briefing · October 22, 2026

    ConnectWise Suspends Cloud Backup After Microsoft 365 Credential Abuse

  4. Daily briefing · October 21, 2026

    ConnectWise Suspends Cloud Backup After Attackers Abuse Microsoft 365 Access

  5. Daily briefing · October 20, 2026

    ConnectWise suspends Cloud Backup after attackers abuse its Microsoft 365 access

  6. Daily briefing · October 20, 2026

    CISA deadline hits for exploited Palo Alto, Cisco and Ahsay flaws; Ivanti chain also active
    • Cisco · Firewalls and NGFW
    • Ivanti · Endpoint management and application control
    • Microsoft · EDR and XDR

  7. Daily briefing · October 19, 2026

    CISA Adds Exploited Fortinet Path Traversal Bug to KEV Catalog

  8. Daily briefing · October 18, 2026

    CISA KEV catalog grows with exploited Palo Alto, Cisco and Ahsay flaws
    • Cisco · Firewalls and NGFW

  9. Daily briefing · October 18, 2026

    Microsoft dismantles YAM Store phishing network behind a billion scam messages

  10. Daily briefing · October 17, 2026

    CISA Catalogs Four More Exploited Flaws in Palo Alto, Cisco, Ahsay Products
    • Cisco · Firewalls and NGFW

  11. Daily briefing · October 17, 2026

    Attackers Chain Three Ivanti Zero-Days to Gain Root on Patched VPNs
    • Ivanti · Endpoint management and application control

  12. Daily briefing · October 17, 2026

    Microsoft Patches Exploited Windows Shell Zero-Day Among Record Bug Haul

  13. Daily briefing · October 16, 2026

    Attackers Exploit Ivanti Connect Secure Zero-Day, CISA Orders Immediate Patching
    • Ivanti · Endpoint management and application control

  14. Daily briefing · October 16, 2026

    CISA Flags Actively Exploited Flaws in Palo Alto, Cisco and Ahsay Products
    • Cisco · Firewalls and NGFW

  15. Daily briefing · October 16, 2026

    Microsoft's Record Patch Tuesday Fixes Exploited Windows Shell Flaw

  16. Daily briefing · October 15, 2026

    CISA urges emergency patching of exploited Ivanti Connect Secure zero-day
    • Ivanti · Endpoint management and application control

  17. Daily briefing · October 15, 2026

    CISA adds four more exploited flaws, including Palo Alto and Cisco products, to KEV catalog
    • Cisco · Firewalls and NGFW

  18. Daily briefing · October 14, 2026

    CISA Warns of Actively Exploited Ivanti Connect Secure Zero-Day
    • Ivanti · Endpoint management and application control

  19. Daily briefing · October 13, 2026

    SonicWall patches pre-auth SSRF flaw letting attackers reach internal appliance functions

  20. Daily briefing · October 10, 2026

    FortiBleed campaign still active, locking admins out of Fortinet firewalls

  21. Daily briefing · October 10, 2026

    SonicWall patches pre-auth SSRF flaw in SMA 1000 VPN appliances

  22. Daily briefing · October 9, 2026

    FBI, Secret Service: FortiBleed campaign still locking out Fortinet admins

  23. Daily briefing · October 9, 2026

    SonicWall patches critical pre-auth SSRF flaw in SMA 1000 appliances

  24. Daily briefing · October 9, 2026

    Accenture Federal Services names Nathaniel Parker as CISO
    • Accenture · Security consulting and advisory

  25. Daily briefing · October 7, 2026

    Microsoft rushes out-of-band Exchange Server fix for mailbox access bug

  26. Daily briefing · October 6, 2026

    Microsoft Ships Out-of-Band Patch for High-Severity Exchange Server Bug

  27. Daily briefing · October 5, 2026

    Critical FortiMail zero-day under active exploitation

  28. Daily briefing · October 5, 2026

    Microsoft rushes out-of-band fix for Exchange Server mailbox flaw

  29. Daily briefing · October 4, 2026

    Critical FortiMail zero-day under active exploitation, patch pending

  30. Daily briefing · October 4, 2026

    Cisco's fifth SD-WAN zero-day of the year exploited in the wild
    • Cisco · Firewalls and NGFW

  31. Daily briefing · October 4, 2026

    Microsoft: AI is shrinking the gap between bug discovery and exploitation

  32. Daily briefing · October 3, 2026

    CISA adds Cisco SD-WAN Manager zero-day to KEV catalog
    • Cisco · Firewalls and NGFW

  33. Daily briefing · October 2, 2026

    CISA Flags Actively Exploited FortiMail Path Traversal Bug

  34. Daily briefing · October 2, 2026

    Cisco Catalyst SD-WAN Manager Flaw Joins CISA's Exploited Vulnerability List
    • Cisco · Firewalls and NGFW

  35. Daily briefing · October 1, 2026

    CISA adds actively exploited Cisco Catalyst SD-WAN Manager bug to KEV catalog
    • Cisco · Firewalls and NGFW

September 2026 · 4 items

  1. Daily briefing · September 29, 2026

    Teen researcher's Microsoft Titan bug exposed employee and Bing data

  2. Daily briefing · September 28, 2026

    Teen researcher finds unverified login tokens exposed Microsoft's internal Titan service

  3. Daily briefing · September 27, 2026

    Check Point management servers were exploited for two months before a fix

  4. Daily briefing · September 27, 2026

    Six more exploited flaws on CISA's KEV list, including F5 and SharePoint

August 2026 · 1 item

  1. Weekly archive · Aug 10 – Aug 16, 2026

    Attackers knock Cisco firewalls offline with an unauthenticated request
    • Cisco · Firewalls and NGFW

June 2026 · 1 item

  1. Weekly archive · Jun 29 – Jul 5, 2026

    Exploited SharePoint Server deserialization flaw joins the KEV list

May 2026 · 1 item

  1. Weekly archive · May 18 – May 24, 2026

    Two Microsoft Defender flaws are exploited in the wild

February 2026 · 2 items

  1. Weekly archive · Feb 23 – Mar 1, 2026

    Cisco SD-WAN authentication bypass was exploited for about three years
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Feb 23 – Mar 1, 2026

    CISA issues Emergency Directive 26-03 during the DHS shutdown
    • Cisco · Firewalls and NGFW

January 2026 · 2 items

  1. Weekly archive · Jan 12 – Jan 18, 2026

    Microsoft takes legal action against the RedVDS cybercrime service

  2. Weekly archive · Jan 12 – Jan 18, 2026

    Cisco patches the AsyncOS email appliance flaw exploited since November
    • Cisco · Firewalls and NGFW

December 2025 · 1 item

  1. Weekly archive · Dec 1 – Dec 7, 2025

    Cloudflare's React mitigation triggers a 25-minute outage

October 2025 · 2 items

  1. Weekly archive · Oct 20 – Oct 26, 2025

    Microsoft reissues its WSUS fix as exploitation begins

  2. Weekly archive · Oct 20 – Oct 26, 2025

    Veeam agrees to buy Securiti AI for $1.725 billion
    • Securiti · Data security posture management
    • Veeam · Backup and cyber recovery

September 2025 · 2 items

  1. Weekly archive · Sep 8 – Sep 14, 2025

    Akira affiliates chain an old SonicWall bug with two configuration gaps

  2. Weekly archive · Sep 8 – Sep 14, 2025

    September Patch Tuesday brings 80-plus Microsoft fixes, none exploited

July 2025 · 2 items

  1. Weekly archive · Jul 28 – Aug 3, 2025

    Palo Alto Networks agrees to buy CyberArk for about $25 billion

  2. Weekly archive · Jul 28 – Aug 3, 2025

    Cisco ISE injection flaws and an old PaperCut bug go on the KEV list
    • Cisco · Firewalls and NGFW

May 2025 · 5 items

  1. Weekly archive · May 19 – May 25, 2025

    CISA Adds Six Vulnerabilities to Known Exploited Catalog
    • Ivanti · Endpoint management and application control

  2. Weekly archive · May 19 – May 25, 2025

    CISA Details Threat Activity Against Commvault's Metallic SaaS Backup

  3. Weekly archive · May 12 – May 18, 2025

    CISA Adds Exploited Fortinet Buffer Overflow Flaw to KEV Catalog

  4. Weekly archive · May 12 – May 18, 2025

    CISA Flags Five Actively Exploited Windows Vulnerabilities

  5. Weekly archive · May 5 – May 11, 2025

    SonicWall SMA100 flaws chain to root, and one may be exploited

April 2025 · 5 items

  1. Weekly archive · Apr 28 – May 4, 2025

    CISA Flags Three More Actively Exploited Vulnerabilities

  2. Weekly archive · Apr 28 – May 4, 2025

    Apache HTTP Server and SonicWall Flaws Added to KEV List

  3. Weekly archive · Apr 21 – Apr 27, 2025

    Security Leadership Moves: F5, Palo Alto Networks, Vaultree

  4. Weekly archive · Apr 14 – Apr 20, 2025

    Windows NTLM hash leak flaw exploited in Poland and Romania

  5. Weekly archive · Apr 7 – Apr 13, 2025

    Fortinet warns of post-exploitation technique abusing patched FortiGate flaws

March 2025 · 9 items

  1. Weekly archive · Mar 31 – Apr 6, 2025

    ESET and Commvault Name New Security Executives

  2. Weekly archive · Mar 31 – Apr 6, 2025

    Ivanti Patches Actively Exploited Connect Secure Flaw
    • Ivanti · Endpoint management and application control

  3. Weekly archive · Mar 31 – Apr 6, 2025

    Cisco Smart Licensing Utility Flaw Added to KEV Catalog
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Mar 24 – Mar 30, 2025

    IngressNightmare flaws put Kubernetes clusters at risk of takeover
    • Wiz · Cloud-native application protection (CNAPP)

  5. Weekly archive · Mar 24 – Mar 30, 2025

    CISA analyzes RESURGE malware on Ivanti Connect Secure appliances
    • Ivanti · Endpoint management and application control

  6. Weekly archive · Mar 17 – Mar 23, 2025

    CISA Adds Fortinet and GitHub Action Flaws to KEV Catalog

  7. Weekly archive · Mar 10 – Mar 16, 2025

    CISA Adds Six Windows Flaws to Known Exploited Vulnerabilities Catalog

  8. Weekly archive · Mar 10 – Mar 16, 2025

    Absolute Security Names Harold Rivas Chief Information Security Officer

  9. Weekly archive · Mar 3 – Mar 9, 2025

    CISA Flags Five Actively Exploited Vulnerabilities, Including Cisco Routers
    • Cisco · Firewalls and NGFW

February 2025 · 9 items

  1. Weekly archive · Feb 24 – Mar 2, 2025

    CISA Flags Microsoft Partner Center and Zimbra Flaws as Actively Exploited

  2. Weekly archive · Feb 24 – Mar 2, 2025

    Botnet of 130,000 Devices Targets Microsoft 365 Accounts

  3. Weekly archive · Feb 17 – Feb 23, 2025

    CISA, FBI, MS-ISAC Issue Ghost (Cring) Ransomware Advisory

  4. Weekly archive · Feb 17 – Feb 23, 2025

    CISA Adds Palo Alto and SonicWall Flaws to Known Exploited Vulnerabilities Catalog

  5. Weekly archive · Feb 17 – Feb 23, 2025

    CISA Flags Craft CMS and a Second PAN-OS Bug as Actively Exploited

  6. Weekly archive · Feb 17 – Feb 23, 2025

    Microsoft Power Pages Flaw Added to CISA Exploited Vulnerabilities List

  7. Weekly archive · Feb 10 – Feb 16, 2025

    Microsoft profiles a Sandworm subgroup that builds persistent access

  8. Weekly archive · Feb 10 – Feb 16, 2025

    PAN-OS authentication bypass fixed as a proof of concept goes public

  9. Weekly archive · Feb 3 – Feb 9, 2025

    CISA Catalogs Five More Exploited Flaws, Including Microsoft Outlook Bug

January 2025 · 10 items

  1. Weekly archive · Jan 27 – Feb 2, 2025

    CISA Adds Actively Exploited Apple Flaw to KEV Catalog

  2. Weekly archive · Jan 27 – Feb 2, 2025

    Thousands of SonicWall Firewalls Remain Exposed to Exploitable Flaw

  3. Weekly archive · Jan 20 – Jan 26, 2025

    CISA and FBI Detail Ivanti Cloud Service Exploitation Chain
    • Ivanti · Endpoint management and application control

  4. Weekly archive · Jan 20 – Jan 26, 2025

    CISA Adds SonicWall SMA1000 Flaw to KEV Catalog

  5. Weekly archive · Jan 20 – Jan 26, 2025

    Cyberhaven, Trellix, Abnormal Security Announce New Security Leadership

  6. Weekly archive · Jan 13 – Jan 19, 2025

    Fortinet fixes a FortiOS zero-day used against exposed firewalls

  7. Weekly archive · Jan 13 – Jan 19, 2025

    Configs and credentials for 15,000 FortiGates leaked

  8. Weekly archive · Jan 13 – Jan 19, 2025

    Nominet becomes the first named victim of an Ivanti Connect Secure zero-day
    • Ivanti · Endpoint management and application control

  9. Weekly archive · Jan 6 – Jan 12, 2025

    Ivanti Connect Secure Zero-Day Added to CISA's KEV Catalog
    • Ivanti · Endpoint management and application control

  10. Weekly archive · Jan 6 – Jan 12, 2025

    Mandiant Traces Ivanti VPN Zero-Day Exploitation to Mid-December
    • Ivanti · Endpoint management and application control

December 2024 · 6 items

  1. Weekly archive · Dec 30 – Jan 5, 2025

    PAN-OS DNS denial-of-service bug added to the KEV catalog

  2. Weekly archive · Dec 23 – Dec 29, 2024

    Lookout Report: iOS Devices Targeted More by Phishing Than Android in Q3 2024

  3. Weekly archive · Dec 16 – Dec 22, 2024

    Fortinet Fixes Takeover Flaw in FortiManager

  4. Weekly archive · Dec 16 – Dec 22, 2024

    Arctic Wolf to Acquire BlackBerry's Cylance Endpoint Business for $160 Million

  5. Weekly archive · Dec 9 – Dec 15, 2024

    Microsoft Patched Exploited Windows CLFS Zero-Day

  6. Weekly archive · Dec 2 – Dec 8, 2024

    Cisco Patches NX-OS Image Verification Bypass Flaw
    • Cisco · Firewalls and NGFW

November 2024 · 8 items

  1. Weekly archive · Nov 18 – Nov 24, 2024

    Two exploited PAN-OS zero-days lead to about 2,000 compromised firewalls

  2. Weekly archive · Nov 18 – Nov 24, 2024

    Microsoft's Windows Resiliency Initiative targets kernel-mode security tools

  3. Weekly archive · Nov 11 – Nov 17, 2024

    CISA Adds Two Palo Alto Expedition Flaws to KEV Catalog

  4. Weekly archive · Nov 11 – Nov 17, 2024

    Palo Alto Networks Warns on Exposed Firewall Management Interfaces

  5. Weekly archive · Nov 11 – Nov 17, 2024

    CISA Adds Five More Vulnerabilities to KEV Catalog

  6. Weekly archive · Nov 11 – Nov 17, 2024

    Fortinet Patches Multiple FortiOS and Product Vulnerabilities

  7. Weekly archive · Nov 4 – Nov 10, 2024

    CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog

  8. Weekly archive · Nov 4 – Nov 10, 2024

    Idaho State University and Bugcrowd Name New CISOs
    • Bugcrowd · Bug bounty and crowdsourced testing

October 2024 · 10 items

  1. Weekly archive · Oct 28 – Nov 3, 2024

    Black Basta Affiliates Expand Phishing to Microsoft Teams

  2. Weekly archive · Oct 28 – Nov 3, 2024

    Fortinet Updates FortiManager Guidance After Zero-Day Exploitation

  3. Weekly archive · Oct 28 – Nov 3, 2024

    Sophos Details Five-Year Fight Against China-Linked Perimeter Device Attacks

  4. Weekly archive · Oct 21 – Oct 27, 2024

    Mandiant Ties Mass FortiManager Exploitation to New UNC5820 Cluster

  5. Weekly archive · Oct 21 – Oct 27, 2024

    Cisco Ships Semiannual ASA/FMC/FTD Bundle as CISA Flags Exploited DoS Flaw
    • Cisco · Firewalls and NGFW

  6. Weekly archive · Oct 21 – Oct 27, 2024

    Broadcom Re-Patches Critical VMware vCenter RCE Flaw

  7. Weekly archive · Oct 21 – Oct 27, 2024

    Sophos to Acquire Secureworks for $859 Million

  8. Weekly archive · Oct 14 – Oct 20, 2024

    OpenAI, Keeper Security, Cequence Security Name New CISOs

  9. Weekly archive · Oct 14 – Oct 20, 2024

    CISA Adds Actively Exploited Veeam Backup Flaw to KEV Catalog
    • Veeam · Backup and cyber recovery

  10. Weekly archive · Oct 7 – Oct 13, 2024

    Fortinet and Ivanti appliance flaws added to the KEV catalog
    • Fortinet · Firewalls and NGFW
    • Ivanti · Endpoint management and application control

September 2024 · 10 items

  1. Weekly archive · Sep 30 – Oct 6, 2024

    Ivanti Endpoint Manager SQL Injection Bug Joins CISA Exploited Vulnerabilities List
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Sep 23 – Sep 29, 2024

    CISA Adds Ivanti vTM Bypass Flaw to KEV Catalog
    • Ivanti · Endpoint management and application control

  3. Weekly archive · Sep 23 – Sep 29, 2024

    Cisco Ships Semiannual IOS and IOS XE Security Bundle
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Sep 16 – Sep 22, 2024

    CISA Adds Microsoft and Progress Flaws to KEV Catalog

  5. Weekly archive · Sep 16 – Sep 22, 2024

    Ivanti Patches Exploited Cloud Services Appliance Bypass
    • Ivanti · Endpoint management and application control

  6. Weekly archive · Sep 9 – Sep 15, 2024

    CISA adds exploited SonicWall SonicOS flaw to KEV catalog

  7. Weekly archive · Sep 9 – Sep 15, 2024

    Microsoft's September Patch Tuesday fixes four exploited zero-days

  8. Weekly archive · Sep 9 – Sep 15, 2024

    Ivanti confirms limited exploitation of Cloud Services Appliance flaw
    • Ivanti · Endpoint management and application control

  9. Weekly archive · Sep 9 – Sep 15, 2024

    Ivanti patches maximum-severity Endpoint Manager vulnerability
    • Ivanti · Endpoint management and application control

  10. Weekly archive · Sep 9 – Sep 15, 2024

    Veeam Backup & Replication RCE flaw patched amid ransomware concerns
    • Veeam · Backup and cyber recovery

August 2024 · 7 items

  1. Weekly archive · Aug 26 – Sep 1, 2024

    SonicWall fixes a critical access control flaw in its firewalls

  2. Weekly archive · Aug 19 – Aug 25, 2024

    CISA Adds Versa Networks Director Flaw to KEV Catalog

  3. Weekly archive · Aug 19 – Aug 25, 2024

    SecurityWeek Tracks Florida CIO, Saviynt, TextNow and SEC-Adjacent Moves
    • Saviynt · Identity governance and administration

  4. Weekly archive · Aug 12 – Aug 18, 2024

    CISA Adds Six Actively Exploited Microsoft Vulnerabilities to KEV Catalog

  5. Weekly archive · Aug 12 – Aug 18, 2024

    Microsoft Ships August 2024 Security Updates Across Multiple Products

  6. Weekly archive · Aug 12 – Aug 18, 2024

    Ivanti Patches Avalanche, Neurons for ITSM, and Virtual Traffic Manager
    • Ivanti · Endpoint management and application control

  7. Weekly archive · Aug 5 – Aug 11, 2024

    CISA Urges Cisco Device Hardening After Smart Install Abuse
    • Cisco · Firewalls and NGFW

July 2024 · 5 items

  1. Weekly archive · Jul 29 – Aug 4, 2024

    DDoS Attack and Defense Error Knock Azure and Microsoft 365 Offline

  2. Weekly archive · Jul 22 – Jul 28, 2024

    Check Point Names Nadav Zafrir CEO as Security Executive Moves Continue

  3. Weekly archive · Jul 1 – Jul 7, 2024

    CISA Adds Cisco NX-OS Flaw to Known Exploited Vulnerabilities Catalog
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Jul 1 – Jul 7, 2024

    Juniper Networks Patches Denial-of-Service Flaw in Junos OS SRX Series

  5. Weekly archive · Jul 1 – Jul 7, 2024

    Tools for Humanity and Vectra AI Add Security and Privacy Executives

June 2024 · 3 items

  1. Weekly archive · Jun 10 – Jun 16, 2024

    Cisco and Schneider Electric Name New Security Leaders
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Jun 3 – Jun 9, 2024

    Microsoft makes Windows Recall opt-in and encrypts its index

  3. Weekly archive · Jun 3 – Jun 9, 2024

    Sophos details Crimson Palace, a two-year Chinese espionage campaign

May 2024 · 4 items

  1. Weekly archive · May 27 – Jun 2, 2024

    CISA Adds Check Point and Linux Kernel Flaws to Exploited Vulnerabilities Catalog

  2. Weekly archive · May 20 – May 26, 2024

    CyberArk Agrees to Acquire Venafi for $1.54 Billion
    • CyberArk · Privileged access management

  3. Weekly archive · May 20 – May 26, 2024

    Cisco Issues Bundled Security Advisory for ASA, FMC, and FTD Software
    • Cisco · Firewalls and NGFW

  4. Weekly archive · May 13 – May 19, 2024

    Microsoft Ships May 2024 Patch Tuesday Updates

April 2024 · 8 items

  1. Weekly archive · Apr 29 – May 5, 2024

    CISA Lists Microsoft SmartScreen Bypass as Actively Exploited

  2. Weekly archive · Apr 29 – May 5, 2024

    SandboxAQ Hires First CISO as Security Leadership Shifts Continue

  3. Weekly archive · Apr 22 – Apr 28, 2024

    Cisco patches ArcaneDoor zero-days in ASA and Firepower firewalls
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Apr 22 – Apr 28, 2024

    Microsoft exposes GRU unit's GooseEgg Print Spooler tool

  5. Weekly archive · Apr 15 – Apr 21, 2024

    Palo Alto Networks Confirms Telemetry Mitigation Ineffective for CVE-2024-3400

  6. Weekly archive · Apr 15 – Apr 21, 2024

    Ivanti Patches Critical Avalanche Vulnerabilities
    • Ivanti · Endpoint management and application control

  7. Weekly archive · Apr 8 – Apr 14, 2024

    Palo Alto Networks PAN-OS Zero-Day Added to CISA's KEV Catalog

  8. Weekly archive · Apr 1 – Apr 7, 2024

    Ivanti Patches Four Flaws in Connect Secure and Policy Secure Gateways
    • Ivanti · Endpoint management and application control

March 2024 · 4 items

  1. Weekly archive · Mar 25 – Mar 31, 2024

    CISA adds Fortinet, Ivanti, and Nice Linear flaws to KEV catalog
    • Fortinet · Firewalls and NGFW
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Mar 25 – Mar 31, 2024

    Cisco bundles IOS and IOS XE security patches
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Mar 18 – Mar 24, 2024

    CISA flags Ivanti fixes for Neurons for ITSM and Standalone Sentry
    • Ivanti · Endpoint management and application control

  4. Weekly archive · Mar 4 – Mar 10, 2024

    Microsoft Discloses Widening Nation-State Breach of Source Code

February 2024 · 9 items

  1. Weekly archive · Feb 26 – Mar 3, 2024

    Five Eyes Warn of Active Exploitation Across Ivanti Connect Secure and Policy Secure
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Feb 26 – Mar 3, 2024

    CISA Adds Microsoft Streaming Service Flaw to Known Exploited Vulnerabilities Catalog

  3. Weekly archive · Feb 26 – Mar 3, 2024

    Cisco Issues NX-OS Advisories Covering MPLS and BGP Denial-of-Service Flaws
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Feb 19 – Feb 25, 2024

    Microsoft extends expanded audit logging to all federal agencies

  5. Weekly archive · Feb 12 – Feb 18, 2024

    CISA Adds Cisco ASA/FTD and Exchange Flaws to Known Exploited Vulnerabilities Catalog

  6. Weekly archive · Feb 12 – Feb 18, 2024

    Critical Fortinet FortiOS Flaw Found Under Active Exploitation

  7. Weekly archive · Feb 12 – Feb 18, 2024

    Microsoft's February Patch Tuesday Fixes Two Exploited Zero-Days

  8. Weekly archive · Feb 5 – Feb 11, 2024

    Fortinet Patches Critical FortiOS Flaws, One Possibly Exploited

  9. Weekly archive · Feb 5 – Feb 11, 2024

    Cisco Patches Vulnerabilities in Expressway Series Collaboration Gateways
    • Cisco · Firewalls and NGFW

January 2024 · 10 items

  1. Weekly archive · Jan 29 – Feb 4, 2024

    Ivanti discloses two more Connect Secure and Policy Secure flaws
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Jan 29 – Feb 4, 2024

    Cloudflare details a nation-state intrusion enabled by Okta-era credentials

  3. Weekly archive · Jan 22 – Jan 28, 2024

    F5 Names Samir Sherif as Chief Information Security Officer
    • F5 · WAF and WAAP

  4. Weekly archive · Jan 15 – Jan 21, 2024

    CISA Issues Emergency Directive on Ivanti Connect Secure and Policy Secure Flaws
    • Ivanti · Endpoint management and application control

  5. Weekly archive · Jan 15 – Jan 21, 2024

    Microsoft Discloses Nation-State Email Breach Affecting Senior Leadership

  6. Weekly archive · Jan 15 – Jan 21, 2024

    Ivanti Mobile Management Flaw Added to CISA's Known Exploited Vulnerabilities List
    • Ivanti · Endpoint management and application control

  7. Weekly archive · Jan 8 – Jan 14, 2024

    Ivanti Connect Secure and Policy Secure zero-days exploited, added to KEV Catalog
    • Ivanti · Endpoint management and application control

  8. Weekly archive · Jan 8 – Jan 14, 2024

    Cisco patches critical Unity Connection file-upload flaw
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Jan 8 – Jan 14, 2024

    Microsoft's January Patch Tuesday fixes two critical Windows flaws

  10. Weekly archive · Jan 1 – Jan 7, 2024

    SonicWall Acquires Banyan Security to Expand Zero Trust and SSE Offerings

December 2023 · 1 item

  1. Weekly archive · Dec 11 – Dec 17, 2023

    Microsoft Details OAuth App Abuse for Cryptomining and Phishing Campaigns

November 2023 · 3 items

  1. Weekly archive · Nov 13 – Nov 19, 2023

    CISA Flags Sophos, Oracle, and Windows Flaws as Actively Exploited

  2. Weekly archive · Nov 13 – Nov 19, 2023

    Microsoft Ships November Patch Tuesday Fixes

  3. Weekly archive · Nov 6 – Nov 12, 2023

    Sumo Logic investigates access through a compromised AWS credential

October 2023 · 10 items

  1. Weekly archive · Oct 30 – Nov 5, 2023

    CISA Adds Two F5 BIG-IP Flaws to Known Exploited Vulnerabilities Catalog
    • F5 · WAF and WAAP

  2. Weekly archive · Oct 30 – Nov 5, 2023

    CISA Updates Guidance on Exploited Cisco IOS XE Web UI Bugs
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Oct 23 – Oct 29, 2023

    CISA Adds Cisco IOS XE Flaw to KEV Catalog
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Oct 23 – Oct 29, 2023

    CISA Updates Cisco IOS XE Patch Guidance Again
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Oct 23 – Oct 29, 2023

    Okta Support System Breach Reaches 1Password
    • Okta · Workforce IAM and SSO

  6. Weekly archive · Oct 16 – Oct 22, 2023

    Cisco IOS XE Web UI zero-day exploited to install implants
    • Cisco · Firewalls and NGFW

  7. Weekly archive · Oct 16 – Oct 22, 2023

    CISA issues guidance on second Cisco IOS XE Web UI vulnerability
    • Cisco · Firewalls and NGFW

  8. Weekly archive · Oct 16 – Oct 22, 2023

    CISA adds Citrix NetScaler and Cisco IOS XE bugs to KEV catalog
    • Cisco · Firewalls and NGFW

  9. Weekly archive · Oct 9 – Oct 15, 2023

    CISA Adds Five Actively Exploited Flaws to KEV Catalog

  10. Weekly archive · Oct 9 – Oct 15, 2023

    Microsoft Fixes Three Actively Exploited Zero-Days in October Patch Tuesday

September 2023 · 8 items

  1. Weekly archive · Sep 18 – Sep 24, 2023

    Trend Micro Apex One RCE Flaw Joins KEV Catalog

  2. Weekly archive · Sep 11 – Sep 17, 2023

    Microsoft and Adobe Patch Actively Exploited Zero-Days in September Update

  3. Weekly archive · Sep 11 – Sep 17, 2023

    CISA Adds Chrome, Cisco, and Android Flaws to KEV Catalog
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Sep 11 – Sep 17, 2023

    Fortinet Patches Vulnerabilities Enabling System Takeover in FortiOS, FortiProxy, FortiWeb

  5. Weekly archive · Sep 4 – Sep 10, 2023

    CISA, FBI, CNMF Detail Nation-State Exploitation of ManageEngine and FortiOS Flaws

  6. Weekly archive · Sep 4 – Sep 10, 2023

    Microsoft Details How a Signing Key Enabled Chinese Hacking of Government Email

  7. Weekly archive · Sep 4 – Sep 10, 2023

    CISA Publishes Malware Analysis of Barracuda ESG Backdoors

  8. Weekly archive · Sep 4 – Sep 10, 2023

    Cisco Issues Advisories for BroadWorks and Identity Services Engine Flaws
    • Cisco · Firewalls and NGFW

August 2023 · 7 items

  1. Weekly archive · Aug 28 – Sep 3, 2023

    Proof-of-Concept Exploit Published for Unauthenticated RCE Chain in Juniper Firewalls

  2. Weekly archive · Aug 21 – Aug 27, 2023

    Ivanti Sentry and Veeam bugs added to KEV Catalog
    • Ivanti · Endpoint management and application control
    • Veeam · Backup and cyber recovery

  3. Weekly archive · Aug 21 – Aug 27, 2023

    Ivanti Sentry zero-day flaw draws urgent patch guidance
    • Ivanti · Endpoint management and application control

  4. Weekly archive · Aug 21 – Aug 27, 2023

    Juniper patches chainable RCE flaws in firewalls and switches

  5. Weekly archive · Aug 7 – Aug 13, 2023

    Microsoft .NET Core Denial-of-Service Flaw Added to KEV Catalog

  6. Weekly archive · Aug 7 – Aug 13, 2023

    Fortinet Patches FortiOS Vulnerability Allowing System Takeover

  7. Weekly archive · Aug 7 – Aug 13, 2023

    CISA Details SEASPY and WHIRLPOOL Backdoors From Barracuda ESG Compromise

July 2023 · 8 items

  1. Weekly archive · Jul 31 – Aug 6, 2023

    CISA Adds Ivanti EPMM Path Traversal Flaw to KEV Catalog
    • Ivanti · Endpoint management and application control

  2. Weekly archive · Jul 31 – Aug 6, 2023

    CISA and Norway's NCSC Detail APT Exploitation of Ivanti EPMM
    • Ivanti · Endpoint management and application control

  3. Weekly archive · Jul 31 – Aug 6, 2023

    CISA Flags New SUBMARINE Backdoor in Barracuda ESG Attacks

  4. Weekly archive · Jul 24 – Jul 30, 2023

    Ivanti EPMM zero-day used against 12 Norwegian ministries
    • Ivanti · Endpoint management and application control

  5. Weekly archive · Jul 24 – Jul 30, 2023

    CISA publishes analysis of the Barracuda ESG backdoors

  6. Weekly archive · Jul 24 – Jul 30, 2023

    Thales agrees to buy Imperva for $3.6 billion
    • Imperva · WAF and WAAP
    • Thales · Encryption, tokenization and key management

  7. Weekly archive · Jul 10 – Jul 16, 2023

    Microsoft's July Patch Tuesday Fixes Four Exploited Zero-Days

  8. Weekly archive · Jul 3 – Jul 9, 2023

    JumpCloud invalidates admin API keys over an "ongoing incident"

June 2023 · 1 item

  1. Weekly archive · Jun 12 – Jun 18, 2023

    Barracuda Updates Advisory on Exploited Email Security Gateway Flaw

May 2023 · 4 items

  1. Weekly archive · May 29 – Jun 4, 2023

    Barracuda ESG appliances were exploited from October 2022

  2. Weekly archive · May 22 – May 28, 2023

    Barracuda Email Security Gateway exploited through CVE-2023-2868

  3. Weekly archive · May 15 – May 21, 2023

    Cisco Advisory Flags Critical Flaws in Small Business Switches
    • Cisco · Firewalls and NGFW

  4. Weekly archive · May 8 – May 14, 2023

    Microsoft's May Patch Tuesday Fixes Two Actively Exploited Flaws

April 2023 · 4 items

  1. Weekly archive · Apr 17 – Apr 23, 2023

    Joint Advisory Details APT28 Exploitation of Cisco Routers via CVE-2017-6742
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Apr 10 – Apr 16, 2023

    Microsoft patches a CLFS zero-day tied to Nokoyawa ransomware

  3. Weekly archive · Apr 10 – Apr 16, 2023

    Darktrace finds no evidence behind a LockBit breach claim

  4. Weekly archive · Apr 3 – Apr 9, 2023

    Cisco Issues Advisories for Remote Code Execution and Command Injection Flaws
    • Cisco · Firewalls and NGFW

March 2023 · 5 items

  1. Weekly archive · Mar 27 – Apr 2, 2023

    Microsoft Unveils AI-Powered Security Copilot

  2. Weekly archive · Mar 20 – Mar 26, 2023

    Cisco Publishes Nine Security Advisories for IOS XE and Related Products
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Mar 13 – Mar 19, 2023

    Microsoft Ships March 2023 Security Updates

  4. Weekly archive · Mar 6 – Mar 12, 2023

    Fortinet Issues March 2023 Vulnerability Advisories

  5. Weekly archive · Mar 6 – Mar 12, 2023

    Cisco Discloses IOS XR Denial-of-Service Flaw
    • Cisco · Firewalls and NGFW

February 2023 · 6 items

  1. Weekly archive · Feb 27 – Mar 5, 2023

    LastPass details the second-stage attack on its cloud backups
    • LastPass · Password and secrets vaults for people

  2. Weekly archive · Feb 27 – Mar 5, 2023

    ESET analyzes BlackLotus, a UEFI bootkit that defeats Secure Boot

  3. Weekly archive · Feb 20 – Feb 26, 2023

    Fortinet Patches Multiple Products Amid Exploitation Concerns

  4. Weekly archive · Feb 20 – Feb 26, 2023

    Cisco Discloses Advisories Spanning ACI, Nexus, and ClamAV
    • Cisco · Firewalls and NGFW

  5. Weekly archive · Feb 13 – Feb 19, 2023

    Microsoft February Patch Tuesday Fixes Three Exploited Zero-Days

  6. Weekly archive · Feb 13 – Feb 19, 2023

    Cisco Issues Advisories Covering ClamAV, Nexus Dashboard and Email Security Products
    • Cisco · Firewalls and NGFW

January 2023 · 5 items

  1. Weekly archive · Jan 30 – Feb 5, 2023

    Verified OAuth Apps Used to Breach O365 Accounts

  2. Weekly archive · Jan 30 – Feb 5, 2023

    Cisco Patches Persistent Code-Injection Flaw in Industrial Gear
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Jan 9 – Jan 15, 2023

    Rackspace Confirms Exchange Exploit Chain Behind Hosted Email Ransomware Breach

  4. Weekly archive · Jan 9 – Jan 15, 2023

    Microsoft's January Patch Tuesday Fixes Actively Exploited Windows Zero-Day

  5. Weekly archive · Jan 2 – Jan 8, 2023

    Fortinet Patches Remote Code Execution Flaw in FortiADC

December 2022 · 4 items

  1. Weekly archive · Dec 19 – Dec 25, 2022

    LastPass discloses theft of customer vault backups
    • LastPass · Password and secrets vaults for people

  2. Weekly archive · Dec 19 – Dec 25, 2022

    Sectigo names Kevin Weiss as CEO
    • Sectigo · Machine identity and PKI

  3. Weekly archive · Dec 12 – Dec 18, 2022

    Fortinet Patches Actively Exploited FortiOS Zero-Day

  4. Weekly archive · Dec 12 – Dec 18, 2022

    Microsoft Patches Exploited SmartScreen Zero-Day, Revokes Abused Driver Certificates

November 2022 · 3 items

  1. Weekly archive · Nov 14 – Nov 20, 2022

    Cisco Patched Identity Services Engine Flaws Allowing Authorization Bypass
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Nov 7 – Nov 13, 2022

    Microsoft's November security updates address multiple actively exploited flaws

  3. Weekly archive · Nov 7 – Nov 13, 2022

    Cisco patches multiple products including ASA and Secure Firewall 3100
    • Cisco · Firewalls and NGFW

October 2022 · 8 items

  1. Weekly archive · Oct 31 – Nov 6, 2022

    CISA Flags Cisco Security Updates for Multiple Products
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Oct 24 – Oct 30, 2022

    Microsoft ties Raspberry Robin USB worm infections to Clop ransomware

  3. Weekly archive · Oct 17 – Oct 23, 2022

    Cisco Patches Identity Services Engine Vulnerabilities
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Oct 10 – Oct 16, 2022

    Microsoft's October Patch Tuesday Fixed 85 Flaws, Including an Actively Exploited Windows Bug

  5. Weekly archive · Oct 10 – Oct 16, 2022

    Fortinet Confirmed Active Exploitation of Critical FortiOS Auth-Bypass Flaw

  6. Weekly archive · Oct 10 – Oct 16, 2022

    Vista Equity Partners Agreed to Take KnowBe4 Private for $4.6 Billion
    • KnowBe4 · Security awareness training

  7. Weekly archive · Oct 3 – Oct 9, 2022

    Exchange Zero-Days CVE-2022-41040 and CVE-2022-41082 Added to CISA's KEV Catalog

  8. Weekly archive · Oct 3 – Oct 9, 2022

    Cisco Patches Multiple Products After CISA Alert
    • Cisco · Firewalls and NGFW

September 2022 · 6 items

  1. Weekly archive · Sep 26 – Oct 2, 2022

    Microsoft Discloses Exchange Server Zero-Days Under Active Attack

  2. Weekly archive · Sep 26 – Oct 2, 2022

    Sophos Patches Exploited Firewall RCE Flaw

  3. Weekly archive · Sep 12 – Sep 18, 2022

    Eight agencies warn of IRGC-affiliated actors running ransom operations

  4. Weekly archive · Sep 12 – Sep 18, 2022

    LastPass: the August intruder had four days inside its development environment
    • LastPass · Password and secrets vaults for people

  5. Weekly archive · Sep 12 – Sep 18, 2022

    Microsoft and Apple each patch an exploited kernel-level zero-day

  6. Weekly archive · Sep 5 – Sep 11, 2022

    Cisco Patches SD-WAN vManage and NVIDIA DPDK Flaws
    • Cisco · Firewalls and NGFW

August 2022 · 7 items

  1. Weekly archive · Aug 22 – Aug 28, 2022

    Cisco Patched Multiple Products Against Remote Takeover Flaws
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Aug 22 – Aug 28, 2022

    0ktapus Phishing Campaign Tied to Twilio, Cloudflare Breaches Detailed

  3. Weekly archive · Aug 15 – Aug 21, 2022

    Cisco Patches Privilege Escalation Flaw in Secure Web Appliance
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Aug 15 – Aug 21, 2022

    Ring App Vulnerability Could Have Exposed Camera Recordings
    • Checkmarx · Static application security testing

  5. Weekly archive · Aug 8 – Aug 14, 2022

    Cisco Confirms Corporate Network Breach Tied to Yanluowang-Linked Actor
    • Cisco · Firewalls and NGFW

  6. Weekly archive · Aug 8 – Aug 14, 2022

    Microsoft Patches Actively Exploited MSDT Zero-Day

  7. Weekly archive · Aug 8 – Aug 14, 2022

    Cisco Fixes RSA Private Key Leak in ASA and Firepower Software
    • Cisco · Firewalls and NGFW

July 2022 · 4 items

  1. Weekly archive · Jul 18 – Jul 24, 2022

    Cisco Issues Security Updates Across Multiple Products
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Jul 11 – Jul 17, 2022

    Microsoft Ships July 2022 Security Updates

  3. Weekly archive · Jul 11 – Jul 17, 2022

    Juniper Networks Releases Security Updates for Multiple Products

  4. Weekly archive · Jul 4 – Jul 10, 2022

    Cisco Issues Updates for Expressway, TelePresence VCS, and Smart Software Manager
    • Cisco · Firewalls and NGFW

June 2022 · 3 items

  1. Weekly archive · Jun 27 – Jul 3, 2022

    CISA Reinstates Windows Certificate-Authentication Flaw to KEV Catalog

  2. Weekly archive · Jun 13 – Jun 19, 2022

    Microsoft Ships June 2022 Security Updates for Multiple Products

  3. Weekly archive · Jun 13 – Jun 19, 2022

    Cisco Patches Email Security Appliance and Small Business Router Flaws
    • Cisco · Firewalls and NGFW

May 2022 · 6 items

  1. Weekly archive · May 30 – Jun 5, 2022

    Microsoft Issues Workaround for "Follina" Zero-Day Under Active Attack

  2. Weekly archive · May 23 – May 29, 2022

    Broadcom agrees to acquire VMware for $61 billion

  3. Weekly archive · May 16 – May 22, 2022

    CISA and MS-ISAC Warn of Active F5 BIG-IP Exploitation
    • F5 · WAF and WAAP

  4. Weekly archive · May 9 – May 15, 2022

    Exploit attempts follow proof-of-concept code for F5 BIG-IP CVE-2022-1388
    • F5 · WAF and WAAP

  5. Weekly archive · May 2 – May 8, 2022

    Cisco Patches Multiple Flaws in Enterprise NFV Infrastructure Software
    • Cisco · Firewalls and NGFW

  6. Weekly archive · May 2 – May 8, 2022

    F5 Discloses Critical BIG-IP Authentication Bypass, CVE-2022-1388
    • F5 · WAF and WAAP

April 2022 · 8 items

  1. Weekly archive · Apr 25 – May 1, 2022

    Five Nations Issue Joint Advisory on 2021's Most Exploited Vulnerabilities

  2. Weekly archive · Apr 25 – May 1, 2022

    Cisco Issues Security Updates Across Multiple Products
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Apr 18 – Apr 24, 2022

    Cisco patches multiple products against takeover vulnerabilities
    • Cisco · Firewalls and NGFW

  4. Weekly archive · Apr 11 – Apr 17, 2022

    CISA adds 10 more vulnerabilities, including a Windows flaw, to KEV Catalog

  5. Weekly archive · Apr 11 – Apr 17, 2022

    Microsoft ships April 2022 security updates across its software line

  6. Weekly archive · Apr 11 – Apr 17, 2022

    Microsoft flags critical unauthenticated RCE in RPC Runtime Library

  7. Weekly archive · Apr 4 – Apr 10, 2022

    CISA Adds Three More Vulnerabilities to KEV Catalog

  8. Weekly archive · Apr 4 – Apr 10, 2022

    Microsoft Expands Bug Bounty to On-Premises Exchange and SharePoint Servers

March 2022 · 5 items

  1. Weekly archive · Mar 28 – Apr 3, 2022

    Sophos Firewall authentication bypass exploited in South Asia

  2. Weekly archive · Mar 21 – Mar 27, 2022

    Microsoft and Okta Confirm Lapsus$ Intrusion Impact

  3. Weekly archive · Mar 21 – Mar 27, 2022

    Deepwatch Names David Stoicescu as CISO

  4. Weekly archive · Mar 14 – Mar 20, 2022

    Veeam patches two critical remote code execution flaws
    • Veeam · Backup and cyber recovery

  5. Weekly archive · Mar 7 – Mar 13, 2022

    Microsoft's March Patch Tuesday Fixes 71 Vulnerabilities

February 2022 · 4 items

  1. Weekly archive · Feb 28 – Mar 6, 2022

    Cisco Patched Flaws in Expressway, Ultra Cloud Core and ISE
    • Cisco · Firewalls and NGFW

  2. Weekly archive · Feb 28 – Mar 6, 2022

    Broadcom's Symantec Unit Disclosed Daxin Backdoor Used in Espionage Campaign

  3. Weekly archive · Feb 21 – Feb 27, 2022

    Sandworm's Cyclops Blink replaces VPNFilter on WatchGuard firewalls

  4. Weekly archive · Feb 21 – Feb 27, 2022

    Zabbix, Zimbra and old Microsoft bugs added to the exploited list

January 2022 · 6 items

  1. Weekly archive · Jan 31 – Feb 6, 2022

    CISA Adds Microsoft Win32k Flaw to Known Exploited Vulnerabilities Catalog

  2. Weekly archive · Jan 31 – Feb 6, 2022

    Cisco Patches Small Business RV Series Router Vulnerabilities
    • Cisco · Firewalls and NGFW

  3. Weekly archive · Jan 10 – Jan 16, 2022

    Microsoft's January Patch Tuesday Fixes Wormable Windows Server Flaw

  4. Weekly archive · Jan 10 – Jan 16, 2022

    Microsoft Warns of Destructive Wiper Targeting Ukrainian Organizations

  5. Weekly archive · Jan 10 – Jan 16, 2022

    Ivanti Updates Log4j Advisory for Multiple Products
    • Ivanti · Endpoint management and application control

  6. Weekly archive · Jan 10 – Jan 16, 2022

    Cisco Patches Privilege Escalation Flaw in Contact Center Management Tools
    • Cisco · Firewalls and NGFW