Nation-State
The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA KEV"
Email Security
Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.
Vulnerabilities
The vulnerability added to CISA’s KEV catalog affects ThreatSonar Anti-Ransomware and it was patched in 2024.
Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Risk Management
The KEV list is useful but largely misunderstood. KEVology explains what it is, and how best to use it.
Vulnerabilities
The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.
Government
CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.
Vulnerabilities
CISA has added the Zimbra flaw to the KEV catalog along with three other bugs exploited in the wild.
Vulnerabilities
The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog.
Vulnerabilities
The maximum-severity code injection flaw can be exploited without authentication for remote code execution.
Vulnerabilities
With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.
Vulnerabilities
Tracked as CVE-2025-59374, the issue is a software backdoor implanted in Asus Live Update in a supply chain attack.
Vulnerabilities
Because user input is not sufficiently sanitized, attackers could exploit the flaw to define external entities within an XML request.
ICS/OT
CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities (KEV) catalog.
Vulnerabilities
Tracked as CVE-2025-9242 (CVSS score of 9.3), the flaw leads to unauthenticated, remote code execution on vulnerable firewalls.
Vulnerabilities
A critical vulnerability in Control Web Panel (CWP), tracked as CVE-2025-48703, allows remote, unauthenticated command execution.
Vulnerabilities
Broadcom has updated its advisory on CVE-2025-41244 to mention the vulnerability’s in-the-wild exploitation.
ICS/OT
Two DELMIA Apriso flaws can be chained together to gain privileged access to the application and execute arbitrary code remotely.
Vulnerabilities
Leading to code execution, authentication bypass, and privilege escalation, the flaws were added to CISA’s KEV list.
Vulnerabilities
The cybersecurity agency has added CVE-2025-61884 to its Known Exploited Vulnerabilities (KEV) catalog.
Cyberwarfare
Both foes and allies have targeted the Balochistan Police force in Pakistan for at least two years, according to SentinelOne.
Artificial Intelligence
Vulnerabilities
Artificial Intelligence
Malware & Threats
Multiple campaigns are using ghost accounts to map GitHub organizations, including their repositories and members.
Malware & Threats
Artificial Intelligence
