Known Exploited Vulnerabilities and counting....
A known exploited vulnerability (KEV) refers to a software vulnerability that is being actively exploited by cybercriminals or threat actors. When a vulnerability becomes known to be exploited in the wild, it signals that the vulnerability poses a significant and imminent risk to organizations.
Common Vulnerability and Exposure
CVEs form a database of known security vulnerabilities that are actively tracked and managed by a group of organizations, such as the U.S. National Cyber Security Alliance. CVEs are an important tool for network security management because they not only provide an inventory of existing vulnerabilities, but also provide information about how the vulnerability can be exploited and instructions on how to protect against it.
Search Known Exploits
Search for CVEs by vendor to identify known exploited vulnerabilities in your environment
CVE = Common Vulnerability and Exposure
CVE OF THE WEEK:
Palo Alto Networks
PAN-OS
Patch deadline: 10 months ago on 01/20/2025
CVE-2024-3393
Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malformed DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Palo Alto Networks PAN-OS Malformed DNS Packet Vulnerability
Learn more about this CVE: paloaltonetworks.com
Cyber Security News
You may have missed...
*
Inside a cyberattack: How hackers steal data
The truth about cybersecurity is that it's almost impossible to keep hackers outside of an organization, particularly as the cybercrime industry ...
Encinitas street safety signs hacked, changed to explicit displays - NBC 7 San Diego
At a time when recent child traffic deaths have focused the attention of Encinitas on its roadways, someone is hacking a safety sign. Encinitas ...
Fired Techie Admits Hacking Employer's Network in Retaliation for Termination
Maxwell Schultz, 35, of Columbus, Ohio, pleaded guilty to computer fraud charges after leading a technical attack that locked thousands of employees ....
Russian hacking suspect wanted by the FBI arrested on Thai resort island - OPB
2025. Thailand's Cyber Crime Investigation Bureau. Police have arrested a suspected Russian hacker on the Thai resort island of Phuket who was wanted ...
GOP rep EXPOSES the SHOCKING extent of China's hacking operations - YouTube
Rep. Andy Ogles, R-Tenn., joins 'Mornings with Maria' to outline his plan to strengthen U.S. cybersecurity and warns that China's daily attacks ...
How to know if your Asus router is one of thousands hacked by China-state hackers
Thousands of Asus routers have been hacked and are under the control of a suspected China-state group that has yet to reveal its intentions for ...
Despite Chinese hacks, Trump's FCC votes to scrap cybersecurity rules for phone and ...
... hacking group called Salt Typhoon that involved hacking into a raft of U.S. phone and internet companies. The hackers broke into more than 200Â ...
Homeland Security thinks Chinese firm's Bitcoin mining chips could be used for espionage ...
Crypto mining rigs from Chinese manufacturer Bitmain are being investigated by the U.S. Department of Homeland Security (DHS) due to potential ...
Is AI eating crypto's liquidity? Inside the $300B Oracle hit and Bitcoin miner pivots
There is one more junction between AI capital and crypto: security. In November, Anthropic published a report on what it called the first large ...
Updated daily