known exploited vulnerabilities (KEV) Archives

Tens of thousands of IPs vulnerable to Fortinet flaw dubbed ‘must patch’ by feds

The Shadowserver Foundation put the figure at around 87,000 for a vulnerability rated as critical and first discovered in February.

Oct 14, 2024 By Tim Starks

CISA warns of hackers exploiting bug for end-of-life Ivanti product

Ivanti's Cloud Service Appliance has a "high severity vulnerability" being exploited in the wild.

Sep 13, 2024 By Christian Vasquez

Microsoft Romania headquarters in City Gate Towers situated in Free Press Square, in Bucharest, Romania. (Getty Images)

Here’s what Microsoft fixed in September’s Patch Tuesday

The tech giant's regular vulnerability list includes new vulnerabilities for Windows Updater and Installer.

Sep 10, 2024 By Christian Vasquez

A digitally generated image of yellow data server discs organized into circular pattern is seen against on beige background. (Andriy Onufriyenko via GettyImages)

Plan to resuscitate beleaguered vulnerability database draws criticism

The National Vulnerability Database has ceased some of its work, but some experts fear the formation of a consortium to address its problems lacks sufficient urgency.

Mar 28, 2024 By Tim Starks

How CISA’s list of ‘must-patch’ vulnerabilities has expanded both in size, and who’s using it

While CISA says the catalog is catching on, some think it needs improvement.

Jun 9, 2022 By Tim Starks