Known Exploited Vulnerabilities and counting....
A known exploited vulnerability (KEV) refers to a software vulnerability that is being actively exploited by cybercriminals or threat actors. When a vulnerability becomes known to be exploited in the wild, it signals that the vulnerability poses a significant and imminent risk to organizations.
Cybersecurity Brief – May 18, 2026
F5 Networks has issued security updates addressing multiple vulnerabilities across its NGINX, BIG-IP, and BIG-IQ product lines, according to an alert from Singapore's Cyber Security Agency. The advisory urges users and administrators of affected products to apply patches immediately, though specific vulnerability details and severity ratings were not disclosed in the public notice. Given F5's widespread deployment in enterprise networks and application delivery infrastructure, organizations should prioritize assessment and remediation.
In the financial sector, HDFC Asset Management Company has confirmed a cybersecurity incident after an anonymous threat actor claimed unauthorized access to its IT systems. The Indian investment firm has activated containment protocols and is currently assessing the scope and impact of the breach. The incident highlights ongoing targeting of financial services institutions, where customer data and trading information represent high-value targets for attackers.
OpenAI has unveiled Daybreak, a new cybersecurity initiative leveraging artificial intelligence for vulnerability detection. The program combines OpenAI's model capabilities with Codex Security tools to help organizations identify and remediate security flaws before exploitation. The launch represents a notable entry by a major AI company into proactive threat detection, though real-world effectiveness will depend on integration challenges and the evolving sophistication of both vulnerabilities and AI detection capabilities.
Sources: Cyber Security Agency of Singapore · Economic Times · The Hacker News
Common Vulnerability and Exposure
CVEs form a database of known security vulnerabilities that are actively tracked and managed by a group of organizations, such as the U.S. National Cyber Security Alliance. CVEs are an important tool for network security management because they not only provide an inventory of existing vulnerabilities, but also provide information about how the vulnerability can be exploited and instructions on how to protect against it.
Search Known Exploits
Search for CVEs by vendor or product to identify known exploited vulnerabilities in your environment
Upcoming Patch Due Dates
via Binding Operational Directive 22-01
(BOD) 22-01 is a directive issued by the Cybersecurity and Infrastructure Security Agency (CISA) in the United States to federal agencies and federal contractors in order to improve their cybersecurity practices. It provides a set of guidelines and requirements that these agencies and contractors must follow to increase their defenses against cyber threats.
Loading...
Cyber Security News
You may have missed...
*
Inside a cyberattack: How hackers steal data
The truth about cybersecurity is that it's almost impossible to keep hackers outside of an organization, particularly as the cybercrime industry ...
Anthropic Disrupts First Reported AI-Orchestrated Cyberattack Campaign
Anthropic revealed that a Chinese state-sponsored group used Claude AI's agentic capabilities to execute cyberattacks with minimal human supervision, ...
Hacker accessed FBI server that included Epstein files in 2023, files suggest - 6ABC
A hacker was able to access an FBI server that contained some files related to Jeffrey Epstein, according to documents released by the DOJ.
Brain implants allow us to move and talk. But they could also be hacked
But they could also be hacked ... The human brain is remarkably complex, with trillions of connections that control how you move, think and feel. Yet ...
Former CISA nominee Sean Plankey named US CEO of defense startup | CyberScoop
... Cybersecurity and Infrastructure Security Agency, of the Department of Homeland Security, in the Dirksen Senate office building, in Washington, DC...
Multiple Vulnerabilities in F5 NGINX, BIG-IP and BIG-IQ | Cyber Security Agency of Singapore
F5 has released security updates to address multiple vulnerabilities in NGINX, BIG-IP, and BIG-IQ. Users and administrators of affected products ...
Yet another crypto bridge falls victim to an $11 million hack - CoinDesk
Blockchain security remains a perennial challenge, and crypto bridges, which enable seamless transfers between blockchains, are frequent targets ...
US crypto ATM operator Bitcoin Depot files for Chapter 11 to wind down business
In April, the firm suffered a security breach that resulted in the theft of $3.7 million. We'd love your feedback.
Verus Ethereum bridge reportedly exploited for $11.6M in latest DeFi attack - TradingView
Blockchain security company PeckShield also called the transfer an exploit, with onchain data showing the funds have since been converted into Ether.
Updated daily
