Author

Caitlin Condon

Former Director, Vulnerability Intelligence

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

Apache Tomcat CVE-2025-24813: What You Need to Know

Fortinet Firewalls Hit with New Zero-Day Attack, Older Data Leak

CVE-2025-0282: Ivanti Connect Secure Zero-Day Exploited in the Wild

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise

CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls

CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT

Zero-Day Exploitation of Ivanti Connect Secure and Policy Secure Gateways

CVE-2023-47246: SysAid Zero-Day Vulnerability Exploited By Lace Tempest

CVE-2023-20198: Active Exploitation of Cisco IOS XE Zero-Day Vulnerability

CVE-2023-22515: Zero-Day Privilege Escalation in Confluence Server and Data Center

Critical Vulnerabilities in WS_FTP Server

Critical Zero-Day Vulnerability in Citrix NetScaler ADC and NetScaler Gateway

Active Exploitation of Multiple Adobe ColdFusion Vulnerabilities

SonicWall Recommends Urgent Patching for GMS and Analytics CVEs

CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances

Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability

Active Exploitation of IBM Aspera Faspex CVE-2022-47986

CVE-2023-22501: Critical Broken Authentication Flaw in Jira Service Management Products