2022 on Daily CISO
Everything we have on record from 2022.
50 weekly archive pages, newest first. Each page sits under the week or day it covers. Daily CISO launched on September 27, 2026; the archive pages here were compiled after that from public records, not published in 2022.
December 2022 · 3 pages
Weekly archive page ·
Week of December 19, 2022: LastPass Confirms Vault Theft, New Exchange Exploit Chain SurfacesCompiled October 10, 2026 from public records
Weekly archive page ·
Week of December 12, 2022: FortiOS Zero-Day, Citrix ADC State-Sponsored ExploitCompiled October 10, 2026 from public records
Weekly archive page ·
Week of December 5, 2022: Rackspace ties its Exchange outage to ransomware, and Apple expands iCloud E2EECompiled September 27, 2026 from public records
November 2022 · 4 pages
Weekly archive page ·
Week of November 28, 2022: Cuba Ransomware Advisory and CISA ICS/KEV AlertsCompiled October 11, 2026 from public records
Weekly archive page ·
Week of November 21, 2022: CISA's KEV Update and the Hive Ransomware AdvisoryCompiled October 20, 2026 from public records
Weekly archive page ·
Week of November 14, 2022: Hive Ransomware Advisory and Iranian APT Federal BreachCompiled October 8, 2026 from public records
Weekly archive page ·
Week of November 7, 2022: Medibank's Ransom Refusal and a Zero-Day-Heavy Patch TuesdayCompiled September 28, 2026 from public records
October 2022 · 5 pages
Weekly archive page ·
Week of October 31, 2022: OpenSSL Patches Critical Flaws, Dropbox Discloses GitHub BreachCompiled September 28, 2026 from public records
Weekly archive page ·
Week of October 24, 2022: Medibank says every customer's data was accessed, and OpenSSL flags a critical fixCompiled September 27, 2026 from public records
Weekly archive page ·
Week of October 17, 2022: Daixin Team Ransomware Advisory and Apache Commons Text FlawCompiled September 28, 2026 from public records
Weekly archive page ·
Week of October 10, 2022: Patch Tuesday Exploits and Multibillion-Dollar Security M&ACompiled September 28, 2026 from public records
Weekly archive page ·
Week of October 3, 2022: CISA's Asset Directive and a DIB Espionage Breach DisclosedCompiled September 28, 2026 from public records
September 2022 · 4 pages
Weekly archive page ·
Week of September 26, 2022: Exchange Zero-Days Surface, Sophos Firewall RCE ExploitedCompiled September 28, 2026 from public records
Weekly archive page ·
Week of September 19, 2022: Iran's Albania Wiper Attacks, Uber's Lapsus$ BreachCompiled September 28, 2026 from public records
Weekly archive page ·
Week of September 12, 2022: Uber breached via an MFA prompt, and OMB demands secure-software attestationsCompiled September 27, 2026 from public records
Weekly archive page ·
Week of September 5, 2022: Vice Society Ransomware Alert, Go-Ahead CyberattackCompiled September 28, 2026 from public records
August 2022 · 5 pages
Weekly archive page ·
Week of August 29, 2022: Apple Patches Exploited iOS Flaw, CISA Issues ICS AdvisoriesCompiled September 28, 2026 from public records
Weekly archive page ·
Week of August 22, 2022: 0ktapus Phishing Fallout and New CISA KEV AdditionsCompiled September 28, 2026 from public records
Weekly archive page ·
Week of August 15, 2022: CISA's Zimbra Alert and Apple's Zero-Day FixesCompiled September 28, 2026 from public records
Weekly archive page ·
Week of August 8, 2022: Cisco Confirms Ransomware Breach, Twilio Discloses Phishing IncidentCompiled September 28, 2026 from public records
Weekly archive page ·
Week of August 1, 2022: Attack on supplier Advanced disrupts NHS 111, and German chambers go darkCompiled September 27, 2026 from public records
July 2022 · 4 pages
Weekly archive page ·
Week of July 25, 2022: CISA Flags New KEV and Log4Shell Exploit; Everbridge Names New CEOCompiled October 10, 2026 from public records
Weekly archive page ·
Week of July 18, 2022: Confluence Zero-Day Alert and Oracle's 349-Bug Patch UpdateCompiled October 8, 2026 from public records
Weekly archive page ·
Week of July 11, 2022: July Patch Tuesday Lands; CISA Adds New KEV EntryCompiled October 10, 2026 from public records
Weekly archive page ·
Week of July 4, 2022: Maui Ransomware Advisory and NIST's Post-Quantum AlgorithmsCompiled September 28, 2026 from public records
June 2022 · 4 pages
Weekly archive page ·
Week of June 27, 2022: CISA Expands KEV Catalog, Warns on MedusaLocker RansomwareCompiled October 8, 2026 from public records
Weekly archive page ·
Week of June 20, 2022: Log4Shell still hits VMware Horizon, and Conti takes its last servers offlineCompiled September 27, 2026 from public records
Weekly archive page ·
Week of June 13, 2022: Microsoft's June Patches Meet a New CISA Known Exploited VulnerabilityCompiled October 8, 2026 from public records
Weekly archive page ·
Week of June 6, 2022: PRC Network-Device Exploits and CISA's KEV Catalog ExpansionCompiled October 7, 2026 from public records
May 2022 · 5 pages
Weekly archive page ·
Week of May 30, 2022: Follina and Confluence Zero-Days Dominate CISA AdvisoriesCompiled October 7, 2026 from public records
Weekly archive page ·
Week of May 23, 2022: Broadcom's $61B VMware deal and GM/Zola account hijackingsCompiled October 7, 2026 from public records
Weekly archive page ·
Week of May 16, 2022: CISA's VMware Emergency Directive and F5 BIG-IP AlertCompiled October 7, 2026 from public records
Weekly archive page ·
Week of May 9, 2022: EU negotiators agree NIS2, and the US ties SATCOM attacks to RussiaCompiled September 27, 2026 from public records
Weekly archive page ·
Week of May 2, 2022: F5 BIG-IP Flaw and Five New KEV Entries, Ransomware Hits CollegesCompiled October 13, 2026 from public records
April 2022 · 4 pages
Weekly archive page ·
Week of April 25, 2022: CISA/FBI Update Ukraine Wiper Advisory, Add 7 KEVsCompiled October 7, 2026 from public records
Weekly archive page ·
Week of April 18, 2022: Russian Critical-Infrastructure Advisory and BlackCat Ransomware IOCsCompiled October 7, 2026 from public records
Weekly archive page ·
Week of April 11, 2022: ICS/SCADA APT Tools Surface, Microsoft and VMware Rush PatchesCompiled October 7, 2026 from public records
Weekly archive page ·
Week of April 4, 2022: Spring4Shell Hits CISA's KEV List, FBI Disrupts Cyclops Blink BotnetCompiled October 6, 2026 from public records
March 2022 · 4 pages
Weekly archive page ·
Week of March 28, 2022: Spring4Shell surfaces, and $620 million drained from the Ronin bridgeCompiled September 27, 2026 from public records
Weekly archive page ·
Week of March 21, 2022: Lapsus$ hits Okta, Microsoft; CISA adds 66 KEVsCompiled October 6, 2026 from public records
Weekly archive page ·
Week of March 14, 2022: Russian actors abuse default MFA settings, and ransomware hits the auto industryCompiled September 27, 2026 from public records
Weekly archive page ·
Week of March 7, 2022: Dirty Pipe Patches and Google's $5.4B Mandiant DealCompiled October 6, 2026 from public records
February 2022 · 4 pages
Weekly archive page ·
Week of February 28, 2022: CISA's 95-Vulnerability KEV Update and Daxin Backdoor DisclosureCompiled October 6, 2026 from public records
Weekly archive page ·
Week of February 21, 2022: Cyber attacks accompany Russia's invasion of Ukraine, and Cyclops Blink is exposedCompiled September 27, 2026 from public records
Weekly archive page ·
Week of February 14, 2022: Russian hackers mine defense contractors, and DDoS hits Ukraine's banksCompiled September 27, 2026 from public records
Weekly archive page ·
Week of February 7, 2022: CISA's Shields Up Debut and SAP ICM Critical FlawsCompiled October 6, 2026 from public records
January 2022 · 4 pages
Weekly archive page ·
Week of January 31, 2022: CISA Adds Win32k Flaw to KEV; Citrix Agrees to $16.5B BuyoutCompiled October 6, 2026 from public records
Weekly archive page ·
Week of January 17, 2022: Ukraine wiper malware, CISA's urgent guidanceCompiled October 6, 2026 from public records
Weekly archive page ·
Week of January 10, 2022: Russian Threat Advisory and Ukraine Wiper Malware SurfaceCompiled October 6, 2026 from public records
Weekly archive page ·
Week of January 3, 2022: FTC puts Log4j patching on notice, and FinalSite ransomware takes schools offlineCompiled September 27, 2026 from public records