Do Son
TL;DR CISA published two advisories on October 15, 2026, covering nine flaws. Six dcm4chee vulnerabilities could expose...
CISA
Multiple critical openPDC openHistorian vulnerabilities threaten energy sector critical infrastructure. Six distinct flaws expose systems to remote...
Executive Summary Threat actors use automated tools to steal sensitive information. Additionally, they establish persistent access through...
TL;DR CISA published an advisory warning operators about several Monta EV charging vulnerabilities. Specifically, these flaws allow...
TL;DR CISA published advisory ICSA-26-272-07 on September 29, 2026, covering two flaws in the Viidure dashcam app...
TL;DR CISA published advisory ICSA-26-272-06 on September 29, 2026, for a critical MikroTik RouterOS vulnerability, CVE-2026-84411. A...
TL;DR On September 24, 2026, CISA updated its Known Exploited Vulnerabilities catalog with two high-risk security flaws....
At a glance On September 9, 2026, federal security agencies exposed intellectual property theft targeting American artificial...
TL;DR Federal officials warned organizations about seven newly abused security flaws. The agency confirmed that threat actors...
TL;DR The Cybersecurity and Infrastructure Security Agency recently published an advisory identifying multiple Ebyte NA111-M vulnerabilities. These...
TL;DR The Cybersecurity and Infrastructure Security Agency released an advisory detailing three critical Xiiaozet LK100W vulnerabilities. These...
The newly published CISA Vulnerability Review for fiscal years 2024 and 2025 delivers a blunt message: the...
WarnAt a glance Actor / group Unattributed threat actors (no group named in this advisory) Activity type...
At a glance Malware family Gunra ransomware (RaaS, Conti-derived) Threat actor Gunra operators and affiliates, also branded...
TL;DR CISA disclosed eight vulnerabilities in the Mira Hormone Monitor and its Android app. The worst, CVE-2026-68067,...
CVE-2026-16347 lets attackers brute-force MikroTik RouterOS logins for unauthorized system access. Rated CVSS 8.8, with no fix...
TL;DR CISA published advisory ICSA-26-202-01 on July 21, 2026. It covers a critical Tycon authentication bypass in...
The White House has launched the GOLD EAGLE initiative, a new clearinghouse for cybersecurity vulnerability coordination. It...
TL;DR CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on July 16, 2026. Two affect...
TL;DR The CISA KEV catalog gained two entries on July 15, 2026. The agency confirmed active exploitation...
TL;DR CISA has confirmed active exploitation of three SharePoint vulnerabilities: CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164. Threat actors chain...
State of Exploited Vulnerabilities — Q2 2026 Coverage period: April 1 – June 30, 2026 Data source:...