Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated https:// hackread.com/26-detected-cisa- known-exploited-vulnerabilities-remediated/
mastodon:infosec-exchange 21h ago
🏛️ CISA Adds Two Known Exploited Vulnerabilities to Catalog 📝 CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog ... https://www.
🏛️ CISA Adds One Known Exploited Vulnerability to Catalog 📝 CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog ,... https://www.
S.
S.
CISA gives US federal agencies three days to patch three actively exploited Linux kernel vulnerabilities added to the KEV catalog.
Two unpatched zero-day RCE vulnerabilities in Citrix NetScaler ADC/Gateway are being actively exploited.
CISA added a Cisco Secure Firewall Management Center (FMC) vulnerability to its Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild. The flaw poses risk to organizations using Cisco FMC for network security management.
S. S.
com/2026/08/21/c...
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.
S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.
Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes).
S.
S.
CISA has added four vulnerabilities to its KEV catalog with evidence of active exploitation. Affected systems include Microsoft IKE Service Extensions, SharePoint, VMware vCenter, and Apple macOS.
Happy # PatchTuesday from # Microsoft https://www.
Resource spotlight: Dark Reading Comprehensive news source for enterprise security operational challenges, cloud security, compliance, and threat mitigation. Category: Enterprise Security Section: Cybersecurity, Threat Intelligence & Awareness Link: https://www.
Resource spotlight: BleepingComputer Premier coverage on active ransomware campaigns, malware technical breakdowns, OS patches, and practical cybersecurity fixes. Category: Ransomware / Tech Section: Cybersecurity, Threat Intelligence & Awareness Link: https://www.
CISA added CVE-2025-68686, a medium-severity vulnerability in Fortinet FortiOS that exposes sensitive information, to its Known Exploited Vulnerabilities catalogue. The flaw allows remote unauthenticated attackers to bypass security measures.
Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.
" https://www. id=CVE-2026- 92934 https://www.
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service. Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes).
Between September 8 and 11, 2026, the U.S. Cybersecurity and Infrastructure Security Agency added six critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Microsoft Windows, GitLab, JFrog Artifactory, and N-able N-central that allow remote code execution and privilege escalation. Active exploitation of these vulnerabilities has been documented.
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability CVE-2026-94127 F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability These types of vulnerabilities are a freque
Cluster mixes Fairphone Linux phone charging, Middle East defense pact, DOE nuclear projects, and RDP honeypot data with no single story. Reports span consumer hardware, international security, energy policy, and cybersecurity intelligence.
0): RCE in Microsoft Entra ID (ex-Azure AD), exploited in the wild. Vulnerability in the cloud identity & access management service; no customer action required.