2025 on Daily CISO
Everything we have on record from 2025.
26 weekly archive pages, newest first. Each page sits under the week or day it covers. Daily CISO launched on September 27, 2026; the archive pages here were compiled after that from public records, not published in 2025.
December 2025 · 1 page
Weekly archive page ·
Week of December 1, 2025: React2Shell flaw hits the KEV list, and CISA details China's BRICKSTORM backdoorCompiled September 27, 2026 from public records
October 2025 · 1 page
Weekly archive page ·
Week of October 20, 2025: A DNS race condition takes down AWS us-east-1, and WSUS gets an emergency patchCompiled September 27, 2026 from public records
September 2025 · 1 page
Weekly archive page ·
Week of September 8, 2025: Phished npm maintainer poisons popular packages, and JLR confirms data theftCompiled September 27, 2026 from public records
July 2025 · 1 page
Weekly archive page ·
Week of July 28, 2025: Palo Alto Networks bids $25 billion for CyberArk, and St. Paul calls in the GuardCompiled September 27, 2026 from public records
June 2025 · 2 pages
Weekly archive page ·
Week of June 16, 2025: Scattered Spider turns to insurers as Aflac discloses a breach, and Nobitex is drainedCompiled September 27, 2026 from public records
Weekly archive page ·
Week of June 2, 2025: New AWS, DTCC CISOs; CISA Updates Play Ransomware AdvisoryCompiled October 25, 2026 from public records
May 2025 · 3 pages
Weekly archive page ·
Week of May 19, 2025: CISA Deputy Director Named, Lumma Stealer TakedownCompiled October 25, 2026 from public records
Weekly archive page ·
Week of May 12, 2025: Coinbase Extortion Disclosure, Nucor Production HaltCompiled October 25, 2026 from public records
Weekly archive page ·
Week of May 5, 2025: Masimo slows production after an intrusion, and LockBit's own panel is hackedCompiled September 27, 2026 from public records
April 2025 · 4 pages
Weekly archive page ·
Week of April 28, 2025: M&S Ransomware Attack and SAP NetWeaver Zero-Day Hit CISA's KEV ListCompiled October 25, 2026 from public records
Weekly archive page ·
Week of April 21, 2025: CISA's ICS Advisory Wave and CVE Program ReassuranceCompiled October 25, 2026 from public records
Weekly archive page ·
Week of April 14, 2025: The CVE program nearly loses its contract, and Conduent reports stolen client dataCompiled September 27, 2026 from public records
Weekly archive page ·
Week of April 7, 2025: Sensata Ransomware Disclosure, Krebs Clearance RevokedCompiled October 24, 2026 from public records
March 2025 · 5 pages
Weekly archive page ·
Week of March 31, 2025: Ivanti Zero-Day Alert and Fast Flux Threat AdvisoryCompiled October 24, 2026 from public records
Weekly archive page ·
Week of March 24, 2025: Oracle Cloud breach samples check out, and Chrome fixes a sandbox escape zero-dayCompiled September 27, 2026 from public records
Weekly archive page ·
Week of March 17, 2025: GitHub Actions Supply-Chain Compromise and New CISO AppointmentsCompiled October 24, 2026 from public records
Weekly archive page ·
Week of March 10, 2025: Medusa Ransomware Advisory and CISA's KEV Catalog AdditionsCompiled October 24, 2026 from public records
Weekly archive page ·
Week of March 3, 2025: BianLian Extortion Mailers and Dual Ransomware DisclosuresCompiled October 24, 2026 from public records
February 2025 · 4 pages
Weekly archive page ·
Week of February 24, 2025: CISA Advisories, DISA Breach Disclosure, and M365 BotnetCompiled October 25, 2026 from public records
Weekly archive page ·
Week of February 17, 2025: Ghost Ransomware Alert and DoD CISO ReturnCompiled October 25, 2026 from public records
Weekly archive page ·
Week of February 10, 2025: 8Base leak site seized, and Microsoft patches two exploited zero-daysCompiled September 27, 2026 from public records
Weekly archive page ·
Week of February 3, 2025: Atlassian Names New CISO, CISA Flags Trimble Cityworks ExploitCompiled October 23, 2026 from public records
January 2025 · 4 pages
Weekly archive page ·
Week of January 27, 2025: Contec Monitor Backdoor, SonicWall Flaw Under AttackCompiled October 23, 2026 from public records
Weekly archive page ·
Week of January 20, 2025: CISA's Ivanti Advisory and New KEV AdditionsCompiled October 23, 2026 from public records
Weekly archive page ·
Week of January 13, 2025: FortiGate zero-day and config leak, and the FBI deletes PlugXCompiled September 27, 2026 from public records
Weekly archive page ·
Week of January 6, 2025: Treasury-BeyondTrust Breach and Ivanti VPN Zero-Day DominateCompiled October 25, 2026 from public records