Known Exploited Vulnerabilities and counting....
A known exploited vulnerability (KEV) refers to a software vulnerability that is being actively exploited by cybercriminals or threat actors. When a vulnerability becomes known to be exploited in the wild, it signals that the vulnerability poses a significant and imminent risk to organizations.
Common Vulnerability and Exposure
CVEs form a database of known security vulnerabilities that are actively tracked and managed by a group of organizations, such as the U.S. National Cyber Security Alliance. CVEs are an important tool for network security management because they not only provide an inventory of existing vulnerabilities, but also provide information about how the vulnerability can be exploited and instructions on how to protect against it.
Search Known Exploits
Search for CVEs by vendor to identify known exploited vulnerabilities in your environment
CVE = Common Vulnerability and Exposure
CVE OF THE WEEK:
Palo Alto Networks
PAN-OS
Patch deadline: 10 months ago on 01/20/2025
CVE-2024-3393
Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malformed DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Palo Alto Networks PAN-OS Malformed DNS Packet Vulnerability
Learn more about this CVE: paloaltonetworks.com
Cyber Security News
You may have missed...
*
Inside a cyberattack: How hackers steal data
The truth about cybersecurity is that it's almost impossible to keep hackers outside of an organization, particularly as the cybercrime industry ...
Cybersecurity jobs available right now: December 2, 2025 - Help Net Security
Application Security Manager · Cloud Security Architect · Cybersecurity Defence Senior Manager · Cybersecurity Manager · Cybersecurity Risk Engineer.
Ethical Hacker: Coolest Job In 2026 - Cybercrime Magazine
Ethical hackers often work with IT departments or private firms to identify vulnerabilities before the bad guys do. According to Cybersecurity ...
Former cyber spy raises $60 million to fight AI threats - CNBC
Zafran Security, a cybersecurity startup created by an Iranian-born spy whose story helped inspire the hit Apple TV series "Tehran," has raised ...
Hackers have a new attack vector: podcasts
For all the talk of Apple's walled garden, sometimes snakes find their way into the begonias, and there's not much you can do about it… except ...
Online banking fraud leaves Winnipeg woman on hook for $174K debt | CBC News
A Winnipeg woman is warning others about what can go wrong in online banking after a credit union is holding her responsible for a debt of more ...
KR: Hacking scheme targeted 120000 home cameras for sexual footage
SEOUL — Four people have been charged in South Korea with hacking into tens of thousands of private video cameras in homes and businesses in ...
University of Pennsylvania confirms new data breach after Oracle hack - Bleeping Computer
The University of Pennsylvania (Penn) has confirmed a new data breach after attackers stole documents containing personal information from its ...
What Could Push Bitcoin to $100K? - OneSafe Blog
Operational security cannot be overlooked either. SMEs need to fortify their security measures with cold storage for offline crypto holdings, multi-Â ....
Updated daily