~Cisa~
CISA added two actively exploited Google vulnerabilities (Skia and Chromium V8) to its KEV catalog, urging immediate patching.
-
IOCs: CVE-2026-3909, CVE-2026-3910
-
#CISA #KEV #ThreatIntel
Latest posts tagged with #Kev on Bluesky
~Cisa~
CISA added two actively exploited Google vulnerabilities (Skia and Chromium V8) to its KEV catalog, urging immediate patching.
-
IOCs: CVE-2026-3909, CVE-2026-3910
-
#CISA #KEV #ThreatIntel
CISA flips the switch: Ivanti EPM (CVE-2026-1603) is under active exploit. A low-complexity XSS allows total authentication bypass with zero user interaction. If your EPM is internet-facing, the "Master Key" is compromised. Get the Strategic Arsenal now. #CyberSecurity #Ivanti #KEV
CISA added three actively exploited vulnerabilities to its KEV catalog affecting:
• Omnissa Workspace ONE
• SolarWinds Web Help Desk
• Ivanti Endpoint Manager
KEV vulnerabilities remain a top target for attackers.
Follow TechNadu for cybersecurity updates.
#CyberSecurity #Infosec #KEV
~Cisa~
CISA added three actively exploited vulnerabilities (Omnissa, SolarWinds, Ivanti) to the KEV catalog.
-
IOCs: CVE-2021-22054, CVE-2025-26399, CVE-2026-1603
-
#CISA #KEV #ThreatIntel
Rockwell Vulnerability Allowing Remote ICS Hacking Exploited in Attacks The vulnerability was disclosed and mitigated in 2021 but its in-the-wild exploitation has only now come to light. The post R...
#ICS/OT #Vulnerabilities #CISA #KEV #exploited #ICS #OT […]
[Original post on securityweek.com]
~Cisa~
CISA added five actively exploited vulnerabilities affecting Hikvision, Rockwell, and Apple products to its KEV catalog.
-
IOCs: CVE-2017-7921, CVE-2021-22681, CVE-2023-41974
-
#CISA #KEV #ThreatIntel #Vulnerability
Federal Directive Mandates Urgent Patching of Critical VMware vCenter Flaws Amid Active Exploitation CISA has ordered federal agencies to patch critical VMware vCenter Server vulnerabilities (CVE-2...
#CybersecurityUpdate #EnterpriseSecurity #Broadcom #CISA […]
[Original post on webpronews.com]
~Cisa~
CISA added actively exploited Qualcomm and VMware Aria vulnerabilities to its KEV catalog.
-
IOCs: CVE-2026-21385, CVE-2026-22719
-
#CISA #KEV #ThreatIntel
~Cisa~
CISA adds two actively exploited Cisco SD-WAN vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, urging immediate remediation.
-
IOCs: CVE-2022-20775, CVE-2026-20127
-
#Cisco #KEV #ThreatIntel
CISA Sounds the Alarm: Two Actively Exploited Vulnerabilities Force Federal Agencies Into Emergency Patching Mode CISA added two actively exploited vulnerabilities—affecting the Linux kernel and ...
#CybersecurityUpdate #actively #exploited #vulnerabilities […]
[Original post on webpronews.com]
~Cisa~
CISA has added two actively exploited RoundCube Webmail vulnerabilities to its KEV catalog, urging immediate patching.
-
IOCs: CVE-2025-49113, CVE-2025-68461
-
#KEV #RoundCube #ThreatIntel
Shipped a new tool: KEV Compare on @cvemate.bsky.social
Compares Known Exploited Vulnerabilities #KEV catalogs across 3 publishers — #CISA, #ENISA, and #CIRCL
→ Pairwise overlap analysis
→ Exclusive coverage gaps
→ Who listed each CVE first
→ Monthly growth trends
cvemate.com/kev #infosec
~Cisa~
CISA adds actively exploited GitLab (CVE-2021-22175) and Dell (CVE-2026-22769) vulnerabilities to its KEV catalog.
-
IOCs: CVE-2021-22175, CVE-2026-22769
-
#CISA #KEV #ThreatIntel
CISA: Hackers Exploiting Vulnerability in Product of Taiwan Security Firm TeamT5 The vulnerability added to CISA’s KEV catalog affects ThreatSonar Anti-Ransomware and it was patched in 2024. The ...
#Vulnerabilities #China #CISA #KEV #exploited #TeamT5
Origin | Interest | Match
~Cisa~
CISA added four actively exploited vulnerabilities affecting Microsoft, Zimbra, TeamT5, and Chromium to its KEV catalog, requiring urgent remediation.
-
IOCs: CVE-2026-2441, CVE-2024-7694, CVE-2020-7796
-
#CISA #KEV #PatchNow #ThreatIntel
CISA remains operational during the DHS shutdown - but at 38% staffing.
KEV stays active.
CIRCIA rulemaking pauses.
Enforcement weakens.
Cyber adversaries don’t observe funding gaps.
Follow TechNadu for cybersecurity policy updates.
#CyberSecurity #CISA #DHS #Infosec #KEV #CriticalInfrastructure
CISA Warns of Exploited SolarWinds, Notepad++, Microsoft Vulnerabilities Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025. The po...
#Vulnerabilities #CISA #CISA #KEV #exploited #Notepad++ […]
[Original post on securityweek.com]
~Cisa~
CISA adds four actively exploited vulnerabilities affecting Microsoft, Notepad++, SolarWinds, and Apple to its KEV catalog, requiring remediation.
-
IOCs: CVE-2024-43468, CVE-2025-15556, CVE-2025-40536
-
#CISA #KEV #ThreatIntel #Vulnerability
~Cisa~
CISA added six new actively exploited vulnerabilities to its KEV catalog, urging immediate patching.
-
IOCs: CVE-2026-21510, CVE-2026-21513, CVE-2026-21514
-
#CISA #KEV #ThreatIntel #Vulnerability
New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s KEV Catalog The KEV list is useful but largely misunderstood. KEVology explains what it is, and how best to use it. The...
#Risk #Management #Vulnerabilities #CISA #KEV #KEVology #vulnerability
Origin | Interest | Match
New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s KEV Catalog The KEV list is useful but largely misunderstood. KEVology explains what it is, and how best to use it. The...
#Risk #Management #Vulnerabilities #CISA #KEV #Featured […]
[Original post on securityweek.com]
Well, #Kev, maybe y'all shouldn't have hired Kid Rock. 🤷
CISA Confirms Active Exploitation of Four Critical Enterprise Software Flaws #CISA #EnterpriseFlaws #KEV
Following a great question from CERT.PL about GCVE KEV assertion format and especially about the confidence level for an evidence of a vulnerability assertion.
We made a first table of confidence level for the evidence in the KEV record format.
| Confidence | Label | Meaning (confidence in […]
What CISA KEV Is and Isn’t – and a Tool to Help Guide Security Teams A new paper gives an insider’s perspective into CISA’s Known Exploited Vulnerability catalog – and also offers a free ...
#Cyber #News #Firewall #Daily #Vulnerabilities #CISA #CISA #KEV […]
[Original post on thecyberexpress.com]
What CISA KEV Is and Isn’t – and a Tool to Help Guide Security Teams A new paper gives an insider’s perspective into CISA’s Known Exploited Vulnerability catalog – and also offers a free ...
#Cyber #News #Firewall #Daily #Vulnerabilities #CISA #CISA #KEV […]
[Original post on thecyberexpress.com]
Critical SmarterMail Vulnerability Exploited in Ransomware Attacks The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests. The post Crit...
#Vulnerabilities #CISA #KEV #exploited #SmarterMail […]
[Original post on securityweek.com]
Critical SmarterMail Vulnerability Exploited in Ransomware Attacks The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests. The post Crit...
#Vulnerabilities #CISA #KEV #exploited #Featured […]
[Original post on securityweek.com]
Concerns Raised Over CISA’s Silent Ransomware Updates in KEV Catalog CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks. The post Co...
#Government #Vulnerabilities #CISA #CISA #KEV #Ransomware #vulnerability
Origin | Interest | Match
~Cisa~
CISA added two actively exploited vulnerabilities, CVE-2025-11953 (React Native) and CVE-2026-24423 (SmarterMail), to its KEV catalog.
-
IOCs: CVE-2025-11953, CVE-2026-24423
-
#CISA #KEV #ThreatIntel