Tag: KEV
CISA retires its weekly vulnerability bulletin after 22 years
CISA is retiring a weekly vulnerability bulletin it has published since 2004.
Attacker’s sloppy server exposes Philippine nuclear site breach
Hunt.io found an exposed server packed with evidence of ownCloud and WordPress intrusions against Philippine targets.
Gitea code injection lands on CISA urgent list after miner attacks
CISA flags a critical Gitea code injection bug that attackers are using to drop crypto miners on exposed servers.
CISA orders TrueConf patches after Ukraine-linked server attacks
Two exploited TrueConf Server flaws land on CISA's KEV list as Head Mare is caught delivering a poisoned installer.
DNS rebinding trick puts Ray AI clusters within browser attackers’ reach
CISA added an actively exploited Ray AI framework flaw to its KEV catalog, citing evidence of active exploitation in the…
Command injection hole in LoadMaster lands on CISA list
Federal agencies have days to patch an exploited Progress ADC bug that drew hundreds of attack attempts.
SharePoint zero-day added to CISA KEV as exploitation mounts
CISA warns of active exploitation of CVE-2026-58644 and three other SharePoint flaws, urging federal agencies to patch within a week.
Two Actively Exploited Flaws Added to CISA Known Vulnerabilities Catalog
CISA adds two actively exploited flaws to its KEV catalog, including a critical Langflow vulnerability exploited by Iranian state hackers…