Ransomware
The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA KEV"
Malware & Threats
The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling.
Vulnerabilities
The flaws allow remote, unauthenticated attackers to make system changes, access underlying accounts, and inject commands.
Vulnerabilities
CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code execution.
Vulnerabilities
The flaws allow attackers to execute arbitrary PHP code and gain root privileges on shared hosting servers.
Vulnerabilities
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
Government
The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries.
Vulnerabilities
An improper authentication bug allows attackers to escalate their privileges and escape containers.
Vulnerabilities
The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers.
Vulnerabilities
Resolved last week, the vulnerability was exploited in the wild as a zero-day to execute scripts with root privileges.
Vulnerabilities
CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.
Vulnerabilities
To optimize management of CVE volume, entries that do not meet specific criteria will not be automatically enriched.
Vulnerabilities
Experts say this is the second-largest Microsoft Patch Tuesday ever based on CVE count.
Vulnerabilities
The security defects allow attackers to escalate privileges and execute arbitrary code remotely.
Malware & Threats
Insufficient sanitization of CSS content within HTML emails leads to inline script execution when the message is opened in a browser.
Vulnerabilities
The SharePoint remote code execution vulnerability CVE-2026-20963, which Microsoft patched in January, has been exploited in the wild.
Vulnerabilities
Tracked as CVE-2025-47813, the flaw leads to the disclosure of the full local installation path of the application.
Vulnerabilities
CISA has added the high-severity authentication bypass vulnerability to its KEV list, along with SolarWinds and Workspace One bugs.
Vulnerabilities
The nation-state-grade iOS exploit kit targets 23 vulnerabilities affecting iOS 13 to 17.2.1.
ICS/OT
The vulnerability was disclosed and mitigated in 2021 but its in-the-wild exploitation has only now come to light.
Phishing
The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages.
Artificial Intelligence
Vulnerabilities
Artificial Intelligence
Network Security
Cybercrime
Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings...
Malware & Threats
Artificial Intelligence
Malware & Threats
