Known Exploited Vulnerabilities and counting....
A known exploited vulnerability (KEV) refers to a software vulnerability that is being actively exploited by cybercriminals or threat actors. When a vulnerability becomes known to be exploited in the wild, it signals that the vulnerability poses a significant and imminent risk to organizations.
Cybersecurity Brief: April 29, 2026
GitHub is facing a critical remote code execution vulnerability (CVE-2026-3854) that researchers warn can be exploited through a single malicious Git push. The flaw affects both GitHub.com and GitHub Enterprise Server installations, creating significant exposure for organizations relying on the platform for code repository management. Details of the vulnerability have been publicly disclosed, raising urgency for administrators to assess their exposure and apply available patches.
In the critical infrastructure sector, Itron—a major supplier of smart meters and energy and water measurement devices—has confirmed a cyberattack affecting its systems. The incident highlights the ongoing vulnerability of industrial control systems and smart grid infrastructure, which remain attractive targets for threat actors. Given Itron's role in utility monitoring across multiple sectors, the attack's scope and potential impact on measurement data integrity or operational technology systems warrant close attention from infrastructure operators and regulators.
Sources: The Hacker News · Cybersecurity Dive
Common Vulnerability and Exposure
CVEs form a database of known security vulnerabilities that are actively tracked and managed by a group of organizations, such as the U.S. National Cyber Security Alliance. CVEs are an important tool for network security management because they not only provide an inventory of existing vulnerabilities, but also provide information about how the vulnerability can be exploited and instructions on how to protect against it.
Search Known Exploits
Search for CVEs by vendor to identify known exploited vulnerabilities in your environment
Upcoming Patch Due Dates
via Binding Operational Directive 22-01
(BOD) 22-01 is a directive issued by the Cybersecurity and Infrastructure Security Agency (CISA) in the United States to federal agencies and federal contractors in order to improve their cybersecurity practices. It provides a set of guidelines and requirements that these agencies and contractors must follow to increase their defenses against cyber threats.
Loading...
Cyber Security News
You may have missed...
*
Inside a cyberattack: How hackers steal data
The truth about cybersecurity is that it's almost impossible to keep hackers outside of an organization, particularly as the cybercrime industry ...
Medtronic says cyberattack on IT network has not disrupted operations
Medical device maker Medtronic confirms cyberattack on corporate IT systems did not affect products or operations.
Major critical infrastructure supplier reports cyberattack
Critical infrastructure supplier Itron reports cyberattack affecting smart meters and energy/water measurement devices.
Report finds cybersecurity workers feel underpaid, undervalued and overstressed ... - TechRadar
Cybersecurity workers are among the most affected by AI impact on jobs · Increased pressure and unsuitably low salaries are putting workers off ...
Critical GitHub Vulnerability Patched in Under Two Hours
GitHub responded to a critical remote code execution vulnerability reported through its bug bounty program by validating the finding, deploying a fix,...
Iran-linked hackers publish personal data on U.S. Marines in Mideast
The Iran-linked hacker group Handala published the alleged names and phone numbers of 2379 U.S. Marines stationed in the Persian Gulf.
FBI brings alleged China-linked hacker to US in rare extradition as Patel defends Italy trip
FBI Directo Kash Patel says the FBI arrested alleged Chinese hacker Xu Zewei, accused of targeting U.S. universities and COVID-19 vaccine research ...
Paragon is not collaborating with Italian authorities probing spyware attacks, report says
... hacking campaign that targeted around 90 people around the world with its “Graphite” spyware. The notifications prompted a scandal in Italy that ....
Chinese hackers using compromised networks to spy on Western companies, says Five Eyes
The UK's National Cyber Security Centre and partners from 10 other countries warned that Chinese-linked groups are leveraging networks of infected dev...
Updated daily