In The News

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

Supply Chain Compromise Impacts Axios Node Package Manager

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Patch Tuesday, April 2026 Edition

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

Russia Hacked Routers to Steal Microsoft Office Tokens

CISA Adds One Known Exploited Vulnerability to Catalog

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

CISA Adds Five Known Exploited Vulnerabilities to Catalog

Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

Microsoft Patch Tuesday, March 2026 Edition

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

CISA Adds Three Known Exploited Vulnerabilities to Catalog

How AI Assistants are Moving the Security Goalposts

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Detecting Fake Active Directory Password Changes

Who is the Kimwolf Botmaster “Dort”?

CISA and Partners Release Guidance for Ongoing Global Exploitation of Cisco SD-WAN Systems

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Active Directory Security Tip #16: Mitigating Kerberoast Attacks

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

Fortinet Releases Guidance to Address Ongoing Exploitation of Authentication Bypass Vulnerability CVE-2026-24858

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Poland Energy Sector Cyber Incident Highlights OT and ICS Security Gaps

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Patch Tuesday, February 2026 Edition

Kimwolf Botnet Swamps Anonymity Network I2P

Who Operates the Badbox 2.0 Botnet?

Please Don’t Feed the Scattered Lapsus ShinyHunters

Kimwolf Botnet Lurking in Corporate, Govt. Networks

Patch Tuesday, January 2026 Edition

Who Benefited from the Aisuru and Kimwolf Botnets?

The Kimwolf Botnet is Stalking Your Local Network

Happy 16th Birthday, KrebsOnSecurity.com!

Most Parked Domains Now Serving Malicious Content

Dismantling Defenses: Trump 2.0 Cyber Year in Review

Summary of Windows Security Updates for April 2004

Multiple Vulnerabilities in Microsoft Products

Cross-Domain Vulnerability in Outlook Express MHTML Protocol Handler

Continuing Threats to Home Users

Multiple Vulnerabilities in OpenSSL

Vulnerability in Microsoft Outlook 2002

Multiple Vulnerabilities in Microsoft Windows

HTTP Parsing Vulnerabilities in Check Point Firewall-1

Multiple Vulnerabilities in Microsoft Internet Explorer

MyDoom.B Virus

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Opportunistic Pro-Russia Hacktivists Attack US and Global Critical Infrastructure

Microsoft Patch Tuesday, December 2025 Edition

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Releases Three Industrial Control Systems Advisories

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill

CISA Releases Nine Industrial Control Systems Advisories

CISA Adds One Known Exploited Vulnerability to Catalog

SMS Phishers Pivot to Points, Taxes, Fake Retailers

CISA Adds One Known Exploited Vulnerability to Catalog

PRC State-Sponsored Actors Use BRICKSTORM Malware Across Public Sector and Information Technology Systems

CISA Releases Five Industrial Control Systems Advisories

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA, Australia, and Partners Author Joint Guidance on Securely Integrating Artificial Intelligence in Operational Technology

Active Directory Security Tip #15: Active Directory Domain Root Permissions

CISA Adds One Known Exploited Vulnerability to Catalog

Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’

CISA Releases Seven Industrial Control Systems Advisories

Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications

Is Your Android TV Streaming Box Part of a Botnet?

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Releases Six Industrial Control Systems Advisories

Mozilla Says It’s Finally Done With Two-Faced Onerep