Federal Civilian Executive Branch

CISA has issued an urgent mandate requiring federal agencies to patch CVE-2026-7273, a critical vulnerability in Zyxel GS1900 switches that…

CISA has added two actively exploited TrueConf Server vulnerabilities (CVE-2026-72529 and CVE-2026-72530) to its KEV catalog, mandating that U.S. federal…

CISA confirmed that ransomware groups are actively exploiting CVE-2026-33825 (BlueHammer), a high-severity Microsoft Defender privilege escalation vulnerability that was already…

CISA confirmed active exploitation of a high-severity SolarWinds Serv-U denial-of-service vulnerability (CVE-2026-28318), which allows remote attackers to crash servers via…

A critical buffer overflow vulnerability (CVE-2026-0300) in Palo Alto Networks PAN-OS software allows unauthenticated remote code execution with root privileges…

Over 10,000 unpatched Zimbra Collaboration Suite servers remain vulnerable to active exploitation of a cross-site scripting flaw (CVE-2025-48700), which allows…

CISA has mandated that U.S. federal agencies patch a Microsoft Defender privilege escalation vulnerability (CVE-2026-33825, dubbed "BlueHammer") within two weeks,…

Over 6,400 Apache ActiveMQ servers remain vulnerable to a high-severity code injection flaw (CVE-2026-34197), which is now being actively exploited.…

A critical privilege escalation vulnerability (CVE-2025-60710) in the Windows Task Host process is under active attack, allowing attackers to gain…

Google has released a critical Chrome update patching 21 vulnerabilities, including a high-severity zero-day flaw (CVE-2026-5281) that is already being…

Federal agencies must patch a critical vulnerability (CVE-2026-20131) in Cisco's firewall management software by March 22, as it allows unauthenticated…

A Russian state-backed hacking group (APT28) is exploiting a critical Zimbra vulnerability (CVE-2025-66376) to target Ukrainian government agencies, prompting a…

A critical, actively exploited security flaw (CVE-2025-66376) in Zimbra's Classic UI allows attackers to hijack sessions and steal data via…

A critical, years-old GitLab vulnerability (CVE-2021-39935) is now being actively exploited, prompting urgent warnings from U.S. cybersecurity authorities. CISA has…

A critical security flaw (CVE-2024-37079) in VMware vCenter Server is under active exploitation, allowing remote code execution via a low-complexity…

CISA has closed ten Emergency Directives from 2019-2024 after confirming their security goals were met, signaling a strategic shift from…

CISA issued an emergency directive for U.S. federal agencies to patch two actively exploited Cisco vulnerabilities (CVE-2025-20333 and CVE-2025-20362), as…

A critical security flaw (CVE-2025-9242) in WatchGuard Firebox firewalls is being actively exploited, prompting CISA to issue an urgent patch…

CISA has issued an urgent directive for U.S. government agencies to patch a critical VMware vulnerability (CVE-2025-41244) that allows privilege…

F5 Networks issued critical security patches for its BIG-IP product line after a state-sponsored breach on August 9, 2025, which…