NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

BACKGROUND
1 SIGNALFIRST DETECTED 25 September 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
8 Apr
CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday

CISA has given U.S. government agencies four days to secure their systems against a critical-severity vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that has been

REPORT · HOW · BleepingComputerOPEN STORY
18 Aug
CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was

REPORT · WHAT · BleepingComputerOPEN STORY
1 Oct
CVE-2026-65660: a SharePoint flaw that never writes a file to disk

<h1> CVE-2026-65660: a SharePoint flaw that never writes a file to disk </h1> <p>Most incident response playbooks for a web server compromise start with the file system. Analysts

REPORT · WHAT · Dev.toOPEN STORY
27 May
CISA gives feds 4 days to patch actively exploited cPanel plugin flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. federal agencies four days to secure their servers against a critical vulnerability in the

REPORT · HOW · BleepingComputerOPEN STORY
15 May
CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited

REPORT · WHAT · The Hacker NewsOPEN STORY
14 Sept
CISA: Hackers now exploit max severity GitLab flaw in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks. [...]

REPORT · HOW · BleepingComputerOPEN STORY
21 Jul
Critical SharePoint RCE flaw exploited to steal machine keys

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are

REPORT · WHAT · BleepingComputerOPEN STORY
29 Apr
CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWise ScreenConnect and Microsoft Windows to its Known

REPORT · WHAT · The Hacker NewsOPEN STORY
Sources
BleepingComputer

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →