Known Exploited Vulnerabilities and counting....
A known exploited vulnerability (KEV) refers to a software vulnerability that is being actively exploited by cybercriminals or threat actors. When a vulnerability becomes known to be exploited in the wild, it signals that the vulnerability poses a significant and imminent risk to organizations.
Common Vulnerability and Exposure
CVEs form a database of known security vulnerabilities that are actively tracked and managed by a group of organizations, such as the U.S. National Cyber Security Alliance. CVEs are an important tool for network security management because they not only provide an inventory of existing vulnerabilities, but also provide information about how the vulnerability can be exploited and instructions on how to protect against it.
Search Known Exploits
Search for CVEs by vendor to identify known exploited vulnerabilities in your environment
Upcoming Patch Due Dates
via Binding Operational Directive 22-01
(BOD) 22-01 is a directive issued by the Cybersecurity and Infrastructure Security Agency (CISA) in the United States to federal agencies and federal contractors in order to improve their cybersecurity practices. It provides a set of guidelines and requirements that these agencies and contractors must follow to increase their defenses against cyber threats.
Loading...
Cyber Security News
You may have missed...
*
Inside a cyberattack: How hackers steal data
The truth about cybersecurity is that it's almost impossible to keep hackers outside of an organization, particularly as the cybercrime industry ...
iPhone exploit DarkSword has been released in the wild | Mashable
DarkSword, the web-based <b>hacker</b> tool that can be used to steal data from millions of iPhones, has just been published on GitHub for public use.
Iran, Hezbollah Try Hacking Israel's Cameras in Bid to Assassinate Israeli Officials - Haaretz
According to Karadi, these are real and serious cyberattacks, some led by official Iranian state <b>hackers</b> against a range of Israeli companies. ...
Widespread cloud environment compromise facilitated by Trivy supply chain hack | brief
... of the Trivy supply chain <b>hack</b> launched by the TeamPCP <b>hacking</b> operation last week, according to The Register.
1K+ cloud environments infected via Trivy attack
Over 1,000 cloud environments have been infected with secret-stealing malware following the Trivy supply-chain attack, with attackers now collaboratin...
US bans new foreign-made consumer internet routers over security concerns - Fox Business
The FCC announced that it is banning the import of all new foreign-made consumer routers due to <b>cybersecurity</b> concerns over vulnerabilities tha...
Iran appears to have conducted a significant cyberattack against a U.S. company, a first since the war started
Iran-linked hacker group Handala Team claimed responsibility for a cyberattack on Stryker, a U.S. medical device company, that disrupted its Microsoft...
Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
Citrix released security updates for two critical vulnerabilities in NetScaler ADC and NetScaler Gateway, including CVE-2026-3055 with a CVSS score of...
US bans foreign-made routers over cybersecurity concerns - Scripps News
US bans foreign-made routers over cybersecurity concerns. The new rule applies broadly to routers based on where they are manufactured, regardless ...
Updated daily