Explore

Rapid Read Rapid Read
CISA Expands Known Exploited Vulnerabilities Catalog with Cisco, Kentico, and Zimbra Flaws

CISA Expands Known Exploited Vulnerabilities Catalog with Cisco, Kentico, and Zimbra Flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog to include eight additional security flaws. Among these are three newly flagged vulnerabilities, including a high-severity information disclosure bug in Cisco Catalyst SD-WAN Manager, identified as CVE-2026-20133. This flaw, which was patched in February, could allow attackers to access the API of an affected system and read information on the underlying operating system. Additionally, CISA has added vulnerabilities from Kentico Xperience and Zimbra Collaboration Suite (ZCS) that have been exploited in attacks. The Kentico vulnerability, CVE-2025-2749, involves a path traversal and arbitrary file upload issue, while the ZCS vulnerability, CVE-2025-48700, is an XSS bug that can execute JavaScript code within a user's session. CISA has urged federal agencies to patch these vulnerabilities by specific deadlines in April and May.
Rapid Read Rapid Read
CISA Warns of Exploited Vulnerabilities in Cisco, Kentico, and Zimbra Products

CISA Warns of Exploited Vulnerabilities in Cisco, Kentico, and Zimbra Products

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These include critical flaws in Cisco Catalyst SD-WAN Manager, Kentico Xperience, and Zimbra Collaboration Suite, which have been actively exploited. The vulnerabilities could lead to information disclosure and remote code execution, posing significant risks to affected systems. CISA has urged federal agencies to patch these vulnerabilities by specific deadlines to mitigate potential threats.
Rapid Read Rapid Read
Cybersecurity Experts Turn Cybercriminals, Plead Guilty to Ransomware Conspiracy

Cybersecurity Experts Turn Cybercriminals, Plead Guilty to Ransomware Conspiracy

Three former cybersecurity professionals, Ryan Goldberg from Georgia, Kevin Martin from Texas, and Angelo Martino from Florida, have pleaded guilty to conspiring to deploy ransomware. Between April and November 2023, the group used Blackcat/ALPHV ransomware to target multiple victims, successfully extorting $1.2 million in Bitcoin from one. The U.S. Department of Justice reports that law enforcement seized $10 million in assets from Martino, including digital currency, vehicles, a food truck, and a luxury fishing boat. Martino, who worked as a ransomware negotiator, allegedly provided confidential information about victims to the attackers, including insurance policy limits, which helped maximize extortion demands. He later launched his own ransomware attacks. All three men face up to 20 years in prison.
Trendline Trendline
Progress Software Addresses Critical Vulnerabilities in MOVEit WAF and LoadMaster

Progress Software Addresses Critical Vulnerabilities in MOVEit WAF and LoadMaster

Progress Software Addresses Critical Vulnerabilities in MOVEit WAF and LoadMaster
Rapid Read Rapid Read
US Cybersecurity Agency Lacks Access to Anthropic's Mythos Model Amid AI Security Concerns

US Cybersecurity Agency Lacks Access to Anthropic's Mythos Model Amid AI Security Concerns

The Cybersecurity and Infrastructure Security Agency (CISA), a key player in safeguarding U.S. infrastructure, does not have access to Anthropic's new Mythos Preview model. This model is noted for its ability to quickly identify and exploit security vulnerabilities, raising concerns about AI-powered cyberattacks. Despite its potential, Anthropic has restricted access to the model, providing it to over 40 companies and organizations for testing and system fortification. CISA's exclusion from this list is notable, especially as industries express growing concerns over AI threats. The decision to withhold public release of Mythos underscores its powerful capabilities and the potential risks associated with its misuse.
Trendline Trendline
Vercel Confirms Cyber Incident, Sensitive Data Potentially Compromised

Vercel Confirms Cyber Incident, Sensitive Data Potentially Compromised

Vercel Confirms Cyber Incident, Sensitive Data Potentially Compromised
Trendline Trendline
Security Firm WitFoo Releases 114 Million-Record Dataset to Enhance Cybersecurity Research

Security Firm WitFoo Releases 114 Million-Record Dataset to Enhance Cybersecurity Research

Security Firm WitFoo Releases 114 Million-Record Dataset to Enhance Cybersecurity Research
Trendline Trendline
SBOMs and VEX Fail to Curb Rising Supply Chain Attacks, Security Teams Struggle

SBOMs and VEX Fail to Curb Rising Supply Chain Attacks, Security Teams Struggle

SBOMs and VEX Fail to Curb Rising Supply Chain Attacks, Security Teams Struggle
Rapid Read Rapid Read
Data Breaches at Healthcare Organizations in Illinois and Texas Impact 600,000 Individuals

Data Breaches at Healthcare Organizations in Illinois and Texas Impact 600,000 Individuals

Three healthcare organizations in the United States, located in Illinois and Texas, have reported significant data breaches affecting nearly 600,000 individuals. The North Texas Behavioral Health Authority disclosed a breach impacting 285,000 people, following a network intrusion detected in October 2025. Southern Illinois Dermatology reported a breach affecting 160,000 individuals, with the Insomnia ransomware group claiming responsibility for stealing patient data. Saint Anthony Hospital in Chicago experienced an email security incident compromising the information of 146,000 people. These breaches were added to the U.S. Department of Health and Human Services' data breach tracker, highlighting the ongoing cybersecurity challenges faced by healthcare providers.
Rapid Read Rapid Read
NIST Halts Rating of Non-Priority Flaws Amid Rising Submission Volumes

NIST Halts Rating of Non-Priority Flaws Amid Rising Submission Volumes

The National Institute of Standards and Technology (NIST) has announced it will cease assigning severity scores to lower-priority vulnerabilities due to an overwhelming increase in submission volumes. Starting April 15, NIST will focus on analyzing and providing details for security issues that pose significant risks, such as those in the CISA's Known Exploited Vulnerabilities catalog or affecting U.S. federal government software. The National Vulnerability Database (NVD) will continue to list all submitted vulnerabilities, but those deemed low priority will only have severity ratings from the CVE Numbering Authority that evaluated them. This decision comes as the number of submissions has grown by 263%, with NIST enriching 42,000 CVEs in 2025 alone.
Rapid Read Rapid Read
Federal Agencies Warn of Iranian Hackers Targeting U.S. Energy and Water Sectors

Federal Agencies Warn of Iranian Hackers Targeting U.S. Energy and Water Sectors

Federal agencies have issued warnings about Iranian hackers targeting critical U.S. infrastructure, specifically the energy and water sectors. The Cybersecurity and Infrastructure Security Agency, along with other federal bodies, released an advisory highlighting the exploitation of programmable logic controllers by Iranian-affiliated cyber actors. This development is part of a broader context of global cyber threats, where nation-state actors, including those from China and Russia, have been involved in significant cyberattacks. These attacks are often strategic, aiming to achieve geopolitical objectives by disrupting essential services and infrastructure.
Rapid Read Rapid Read
Hackers Unsuccessful in Exploiting Vulnerability in Discontinued TP-Link Routers, Reports Palo Alto Networks

Hackers Unsuccessful in Exploiting Vulnerability in Discontinued TP-Link Routers, Reports Palo Alto Networks

Hackers have been attempting to exploit a vulnerability in discontinued TP-Link routers for over a year, but have so far been unsuccessful, according to a report by Palo Alto Networks. The vulnerability, identified as CVE-2023-33538, is an authenticated command injection issue that affects several models of TP-Link routers, including TL-WR940N v2 and v4, TL-WR740N v1 and v2, and TL-WR841N v8 and v10. The flaw, which has a CVSS score of 8.8, is due to the lack of sanitization of the ssid1 parameter in HTTP GET requests. Although proof-of-concept exploit code has been available for nearly three years, hackers have failed to exploit the flaw due to errors in the exploit code and incorrect targeting of parameters. The U.S. cybersecurity agency CISA has previously added this vulnerability to its Known Exploited Vulnerabilities catalog, urging federal agencies to discontinue the use of these devices.