Known Exploited Vulnerabilities and counting....
A known exploited vulnerability (KEV) refers to a software vulnerability that is being actively exploited by cybercriminals or threat actors. When a vulnerability becomes known to be exploited in the wild, it signals that the vulnerability poses a significant and imminent risk to organizations.
Cybersecurity Brief: April 13, 2026
Healthcare organizations continue to face escalating cyber threats, with the FBI confirming the sector topped all industries for ransomware attacks in 2025 with 460 incidents and 182 data breaches. The trend shows no signs of abating: Massachusetts-based Signature Healthcare is currently managing a significant cyberattack detected April 6th, forcing the Brockton hospital to divert ambulances and cancel services. The Anubis ransomware-as-a-service gang has claimed responsibility and alleges theft of 2 terabytes of patient data, highlighting the continued healthcare targeting as critical infrastructure remains vulnerable.
Software supply chain compromises are delivering immediate consequences across multiple vectors. CPUID's backend infrastructure was hijacked to distribute malware-laden versions of popular hardware monitoring tools CPU-Z and HWMonitor, replacing legitimate downloads with remote access trojans designed for credential theft. Meanwhile, a critical pre-authentication RCE vulnerability (CVE-2026-39987) in the Marimo Python notebook tool was exploited in the wild within 10 hours of public disclosure on April 8th. Additionally, Microsoft disclosed a severe intent redirection vulnerability in the widely-deployed EngageLab SDK that allowed malicious Android applications to bypass security sandboxing and access sensitive data in cryptocurrency wallets. Attackers are also leveraging brand impersonation, with fake Claude AI websites distributing the PlugX remote access trojan, demonstrating how threat actors quickly weaponize interest in emerging technologies.
Sources: SecurityWeek · Gov Info Security · The Hacker News · AHA · HIPAA Journal · The Register · Microsoft Security
Common Vulnerability and Exposure
CVEs form a database of known security vulnerabilities that are actively tracked and managed by a group of organizations, such as the U.S. National Cyber Security Alliance. CVEs are an important tool for network security management because they not only provide an inventory of existing vulnerabilities, but also provide information about how the vulnerability can be exploited and instructions on how to protect against it.
Search Known Exploits
Search for CVEs by vendor to identify known exploited vulnerabilities in your environment
Upcoming Patch Due Dates
via Binding Operational Directive 22-01
(BOD) 22-01 is a directive issued by the Cybersecurity and Infrastructure Security Agency (CISA) in the United States to federal agencies and federal contractors in order to improve their cybersecurity practices. It provides a set of guidelines and requirements that these agencies and contractors must follow to increase their defenses against cyber threats.
Loading...
Cyber Security News
You may have missed...
*
Inside a cyberattack: How hackers steal data
The truth about cybersecurity is that it's almost impossible to keep hackers outside of an organization, particularly as the cybercrime industry ...
Crypto Project Details Alleged 6-Month North Korean Intel Op Behind $285 Million Hack
Drift Protocol details how North Korean-linked threat actors conducted a six-month intelligence operation involving social engineering and oracle mani...
Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit
Chinese espionage-focused APT Mustang Panda deployed a kernel-mode rootkit in mid-2025 attacks against Asian targets using a signed driver file to mai...
Salt Typhoon is hacking the world's phone and internet giants — here's everywhere that's been hit
Comprehensive overview of Salt Typhoon's global reach, showing the hacking group has compromised at least 200 companies worldwide and targeted major U...
China-Linked APT Exploited Sitecore Zero-Day in Critical Infrastructure Intrusion
A China-nexus APT actor (UAT-8837) exploited a critical Sitecore zero-day vulnerability (CVE-2025-53690) to gain initial access to North American crit...
Google Releases Emergency Patch for Chrome Zero-Day CVE-2026-5281 Being Actively Exploited
Google released an out-of-band Chrome 146 update to fix CVE-2026-5281, a use-after-free vulnerability in WebGPU with active exploit code in the wild.
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621
Adobe released emergency updates to fix a critical security flaw in Acrobat Reader (CVE-2026-34621, CVSS 8.6) that is being actively exploited in the ...
CPUID Website Compromised to Distribute STX RAT Malware via CPU-Z and HWMonitor
Unknown threat actors compromised the CPUID website for less than 24 hours to serve malicious executables and deploy remote access trojan STX RAT thro...
EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallets
Microsoft disclosed a severe intent redirection vulnerability in the widely-used EngageLab Android SDK that exposed over 50 million app installations,...
Updated daily