Skip to content
Edition of Sunday, October 25, 2026
Daily CISO

The five-minute briefing for security leaders.

2023 on Daily CISO

Everything we have on record from 2023.

52 weekly archive pages, newest first. Each page sits under the week or day it covers. Daily CISO launched on September 27, 2026; the archive pages here were compiled after that from public records, not published in 2023.

December 2023 · 4 pages

  1. Weekly archive page ·

    Week of December 25, 2023: First American's Cyber Incident Update and MFA Bypass Warnings

    Compiled October 16, 2026 from public records

  2. Weekly archive page ·

    Week of December 18, 2023: SEC incident rule takes effect with VF's 8-K, and the FBI disrupts ALPHV/BlackCat

    Compiled September 27, 2026 from public records

  3. Weekly archive page ·

    Week of December 11, 2023: Russian SVR TeamCity Exploitation and CISA's Secure by Design Push

    Compiled October 14, 2026 from public records

  4. Weekly archive page ·

    Week of December 4, 2023: Star Blizzard Advisory and ColdFusion Government Breach

    Compiled October 14, 2026 from public records

November 2023 · 4 pages

  1. Weekly archive page ·

    Week of November 27, 2023: IRGC PLC Attacks on Water Utilities and Slovenian Power Ransomware

    Compiled October 14, 2026 from public records

  2. Weekly archive page ·

    Week of November 20, 2023: Citrix Bleed Hits Boeing, CISA-NCSC Unveil Secure AI Guidelines

    Compiled October 16, 2026 from public records

  3. Weekly archive page ·

    Week of November 13, 2023: Scattered Spider Advisory, Rhysida Ransomware Guidance

    Compiled October 18, 2026 from public records

  4. Weekly archive page ·

    Week of November 6, 2023: Ransomware disrupts ICBC's US arm, and Clop affiliate exploits a SysAid zero-day

    Compiled September 27, 2026 from public records

October 2023 · 5 pages

  1. Weekly archive page ·

    Week of October 30, 2023: Citrix Bleed Mass Exploitation and Biden's AI Executive Order

    Compiled October 14, 2026 from public records

  2. Weekly archive page ·

    Week of October 23, 2023: Cisco IOS XE KEV Additions and Okta Breach Fallout

    Compiled October 14, 2026 from public records

  3. Weekly archive page ·

    Week of October 16, 2023: Cisco IOS XE Zero-Day, Atlassian Confluence Under Attack

    Compiled September 30, 2026 from public records

  4. Weekly archive page ·

    Week of October 9, 2023: HTTP/2 Rapid Reset Fallout and Citrix NetScaler Flaws

    Compiled September 30, 2026 from public records

  5. Weekly archive page ·

    Week of October 2, 2023: NSA-CISA misconfigurations advisory, Confluence zero-day added to KEV

    Compiled September 30, 2026 from public records

September 2023 · 4 pages

  1. Weekly archive page ·

    Week of September 25, 2023: Johnson Controls hit by ransomware, and allies warn of BlackTech router implants

    Compiled September 27, 2026 from public records

  2. Weekly archive page ·

    Week of September 18, 2023: Snatch Ransomware Advisory and CISA KEV Catalog Additions

    Compiled September 30, 2026 from public records

  3. Weekly archive page ·

    Week of September 11, 2023: KEV Adds Apple & Chrome Flaws; CISA Issues OSS Roadmap

    Compiled September 30, 2026 from public records

  4. Weekly archive page ·

    Week of September 4, 2023: CISA Warns on ManageEngine Exploits, Microsoft Explains Stolen Key

    Compiled September 30, 2026 from public records

August 2023 · 4 pages

  1. Weekly archive page ·

    Week of August 28, 2023: QakBot Takedown and Infamous Chisel Malware Exposed

    Compiled September 30, 2026 from public records

  2. Weekly archive page ·

    Week of August 21, 2023: WinRAR zero-day exploited, Seiko hit by ALPHV ransomware

    Compiled September 30, 2026 from public records

  3. Weekly archive page ·

    Week of August 14, 2023: Clorox discloses an IT intrusion, Colorado warns 4 million over IBM MOVEit breach

    Compiled September 27, 2026 from public records

  4. Weekly archive page ·

    Week of August 7, 2023: Barracuda Backdoors and August Patch Tuesday

    Compiled September 30, 2026 from public records

July 2023 · 5 pages

  1. Weekly archive page ·

    Week of July 31, 2023: Ivanti EPMM Zero-Days Exploited, CISA Publishes Strategic Plan

    Compiled September 30, 2026 from public records

  2. Weekly archive page ·

    Week of July 24, 2023: The SEC adopts its cyber disclosure rules, and an Ivanti zero-day hits Norway

    Compiled September 27, 2026 from public records

  3. Weekly archive page ·

    Week of July 17, 2023: Citrix NetScaler Zero-Day, VirusTotal Data Leak

    Compiled September 30, 2026 from public records

  4. Weekly archive page ·

    Week of July 10, 2023: Storm-0558 Outlook Breach Advisory and Revolut's $20M Fraud

    Compiled September 30, 2026 from public records

  5. Weekly archive page ·

    Week of July 3, 2023: Ransomware halts Japan's busiest port, and JumpCloud invalidates admin API keys

    Compiled September 27, 2026 from public records

June 2023 · 4 pages

  1. Weekly archive page ·

    Week of June 26, 2023: CISA DDoS Alert, KEV Additions, and Election Security Shake-Up

    Compiled October 14, 2026 from public records

  2. Weekly archive page ·

    Week of June 19, 2023: CISA KEV Additions and New Cybersecurity Division Leaders

    Compiled October 14, 2026 from public records

  3. Weekly archive page ·

    Week of June 12, 2023: CISA's Management-Interface Directive and LockBit Advisory

    Compiled October 13, 2026 from public records

  4. Weekly archive page ·

    Week of June 5, 2023: CL0P's MOVEit Mass-Exploitation and CISA's KEV Additions

    Compiled October 14, 2026 from public records

May 2023 · 5 pages

  1. Weekly archive page ·

    Week of May 29, 2023: MOVEit Transfer zero-day exploited, and Barracuda ESG attacks traced to 2022

    Compiled September 27, 2026 from public records

  2. Weekly archive page ·

    Week of May 22, 2023: Five Eyes expose Volt Typhoon, and Barracuda email gateways hit through a zero-day

    Compiled September 27, 2026 from public records

  3. Weekly archive page ·

    Week of May 15, 2023: CISA's BianLian Advisory and JD Sports' Interim CISO

    Compiled October 13, 2026 from public records

  4. Weekly archive page ·

    Week of May 8, 2023: PaperCut Ransomware Alert and Russian Snake Malware Exposed

    Compiled October 13, 2026 from public records

  5. Weekly archive page ·

    Week of May 1, 2023: CISA KEV additions and NFL Draft security deployment

    Compiled October 12, 2026 from public records

April 2023 · 4 pages

  1. Weekly archive page ·

    Week of April 24, 2023: 3CX Supply Chain Fallout Widens, CISA Issues Multiple Advisories

    Compiled October 12, 2026 from public records

  2. Weekly archive page ·

    Week of April 17, 2023: CISA Chief of Staff Transition and APT28 Cisco Router Advisory

    Compiled October 12, 2026 from public records

  3. Weekly archive page ·

    Week of April 10, 2023: Allies publish secure-by-design principles, Microsoft fixes an exploited CLFS flaw

    Compiled September 27, 2026 from public records

  4. Weekly archive page ·

    Week of April 3, 2023: CISA Expands KEV Catalog as Cisco, ICS Advisories Land

    Compiled October 12, 2026 from public records

March 2023 · 4 pages

  1. Weekly archive page ·

    Week of March 27, 2023: 3CX Supply Chain Attack and New KEV Additions

    Compiled October 12, 2026 from public records

  2. Weekly archive page ·

    Week of March 20, 2023: CISA Ransomware Notifications and Cisco's Nine-Advisory Patch Batch

    Compiled October 12, 2026 from public records

  3. Weekly archive page ·

    Week of March 13, 2023: CISA Launches Ransomware Pilot, LockBit 3.0 Advisory Drops

    Compiled October 11, 2026 from public records

  4. Weekly archive page ·

    Week of March 6, 2023: CISA Expands KEV List, Pushes Secure-by-Design Tech

    Compiled October 12, 2026 from public records

February 2023 · 4 pages

  1. Weekly archive page ·

    Week of February 27, 2023: A new US cyber strategy shifts the burden to vendors, and DISH confirms ransomware

    Compiled September 27, 2026 from public records

  2. Weekly archive page ·

    Week of February 20, 2023: CISA Retires US-CERT, Adds Three Vulnerabilities to KEV

    Compiled October 11, 2026 from public records

  3. Weekly archive page ·

    Week of February 13, 2023: Microsoft, Apple Patch Exploited Zero-Days; CISA Expands KEV List

    Compiled October 12, 2026 from public records

  4. Weekly archive page ·

    Week of February 6, 2023: ESXiArgs Ransomware Spree and DPRK Ransomware Funding Advisory

    Compiled October 10, 2026 from public records

January 2023 · 5 pages

  1. Weekly archive page ·

    Week of January 30, 2023: Ukraine Wiper Surge and Critical OAuth, QNAP, Jira Flaws

    Compiled October 10, 2026 from public records

  2. Weekly archive page ·

    Week of January 23, 2023: CISA RMM Phishing Warning and K-12 Security Report

    Compiled October 10, 2026 from public records

  3. Weekly archive page ·

    Week of January 16, 2023: T-Mobile says API abuse hit 37 million accounts, and Yum! Brands reports ransomware

    Compiled September 27, 2026 from public records

  4. Weekly archive page ·

    Week of January 9, 2023: Rackspace Breach Details Emerge, Microsoft Patches Zero-Day

    Compiled October 10, 2026 from public records

  5. Weekly archive page ·

    Week of January 2, 2023: CISA ICS Advisories, Wabtec Breach, LockBit Port Threat

    Compiled October 20, 2026 from public records