Known Exploited Vulnerabilities and counting....

A known exploited vulnerability (KEV) refers to a software vulnerability that is being actively exploited by cybercriminals or threat actors. When a vulnerability becomes known to be exploited in the wild, it signals that the vulnerability poses a significant and imminent risk to organizations.

Cybersecurity Brief – May 18, 2026

F5 Networks has issued security updates addressing multiple vulnerabilities across its NGINX, BIG-IP, and BIG-IQ product lines, according to an alert from Singapore's Cyber Security Agency. The advisory urges users and administrators of affected products to apply patches immediately, though specific vulnerability details and severity ratings were not disclosed in the public notice. Given F5's widespread deployment in enterprise networks and application delivery infrastructure, organizations should prioritize assessment and remediation.

In the financial sector, HDFC Asset Management Company has confirmed a cybersecurity incident after an anonymous threat actor claimed unauthorized access to its IT systems. The Indian investment firm has activated containment protocols and is currently assessing the scope and impact of the breach. The incident highlights ongoing targeting of financial services institutions, where customer data and trading information represent high-value targets for attackers.

OpenAI has unveiled Daybreak, a new cybersecurity initiative leveraging artificial intelligence for vulnerability detection. The program combines OpenAI's model capabilities with Codex Security tools to help organizations identify and remediate security flaws before exploitation. The launch represents a notable entry by a major AI company into proactive threat detection, though real-world effectiveness will depend on integration challenges and the evolving sophistication of both vulnerabilities and AI detection capabilities.

Sources: Cyber Security Agency of Singapore · Economic Times · The Hacker News

Woman Looking at Computer Screen

CVEs form a database of known security vulnerabilities that are actively tracked and managed by a group of organizations, such as the U.S. National Cyber Security Alliance. CVEs are an important tool for network security management because they not only provide an inventory of existing vulnerabilities, but also provide information about how the vulnerability can be exploited and instructions on how to protect against it.

Search Known Exploits

Search for CVEs by vendor or product to identify known exploited vulnerabilities in your environment

Loading vendors and products...

Upcoming Patch Due Dates

via Binding Operational Directive 22-01

(BOD) 22-01 is a directive issued by the Cybersecurity and Infrastructure Security Agency (CISA) in the United States to federal agencies and federal contractors in order to improve their cybersecurity practices. It provides a set of guidelines and requirements that these agencies and contractors must follow to increase their defenses against cyber threats.

Loading...

News Logo

Cyber Security News

You may have missed...


📌 Pinned

*

https:betanews.comMar 5

Inside a cyberattack: How hackers steal data

The truth about cybersecurity is that it's almost impossible to keep hackers outside of an organization, particularly as the cybercrime industry ...

https://www.anthropic.comMay 18

Anthropic Disrupts First Reported AI-Orchestrated Cyberattack Campaign

Anthropic revealed that a Chinese state-sponsored group used Claude AI's agentic capabilities to execute cyberattacks with minimal human supervision, ...

https://6abc.comMay 18

Hacker accessed FBI server that included Epstein files in 2023, files suggest - 6ABC

A hacker was able to access an FBI server that contained some files related to Jeffrey Epstein, according to documents released by the DOJ.

https://theconversation.comMay 18

Brain implants allow us to move and talk. But they could also be hacked

But they could also be hacked ... The human brain is remarkably complex, with trillions of connections that control how you move, think and feel. Yet ...

https://cyberscoop.comMay 18

Former CISA nominee Sean Plankey named US CEO of defense startup | CyberScoop

... Cybersecurity and Infrastructure Security Agency, of the Department of Homeland Security, in the Dirksen Senate office building, in Washington, DC...

https://www.csa.gov.sgMay 18

Multiple Vulnerabilities in F5 NGINX, BIG-IP and BIG-IQ | Cyber Security Agency of Singapore

F5 has released security updates to address multiple vulnerabilities in NGINX, BIG-IP, and BIG-IQ. Users and administrators of affected products ...

https://www.coindesk.comMay 18

Yet another crypto bridge falls victim to an $11 million hack - CoinDesk

Blockchain security remains a perennial challenge, and crypto bridges, which enable seamless transfers between blockchains, are frequent targets ...

https://www.theblock.coMay 18

US crypto ATM operator Bitcoin Depot files for Chapter 11 to wind down business

In April, the firm suffered a security breach that resulted in the theft of $3.7 million. We'd love your feedback.

https://www.tradingview.comMay 18

Verus Ethereum bridge reportedly exploited for $11.6M in latest DeFi attack - TradingView

Blockchain security company PeckShield also called the transfer an exploit, with onchain data showing the funds have since been converted into Ether.


Updated daily