Known exploited vulnerabilities are security flaws that trusted authorities or threat intelligence confirm are under active attack, and they matter because enterprises use them to prioritize remediation, demonstrate risk-based patching, and align with regulatory and governance expectations.
August 20, 2025
CISA will refocus its cybersecurity alerts webpage on urgent cybersecurity information beginning May 12.
August 20, 2025
CISA and U.S. agencies issued guidance for operational technology asset inventories.
August 20, 2025
360 Privacy and Hetherington Group partnered to enhance digital protection services for individuals with significant reputations.
August 18, 2025
CISA adds CVE-2025-54948 to its Known Exploited Vulnerabilities Catalog due to active exploitation concerns.
August 11, 2025
CISA adds three vulnerabilities tied to D-Link devices to its Known Exploited Vulnerabilities Catalog due to active exploitation.
August 11, 2025
CISA published a Malware Analysis Report outlining detection signatures for recent Microsoft SharePoint vulnerabilities.