The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following reports…
Cybersecurity researchers at Lumen's Black Lotus Labs have identified a significant expansion of the JDY botnet, a covert network linked to China-nexus…
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
CVE-2024-20399 is a vulnerability in Cisco NX-OS that requires admin access and was exploited by the China-linked group Velvet Ant to plant…
Cisco NX-OS is a network operating system used on Cisco Nexus switches. It was exploited via CVE-2024-20399 by Velvet Ant to plant…
Splunk has released urgent security updates to address a critical vulnerability in Splunk Enterprise, tracked as CVE-2026-20253, with a CVSS score of…
An advanced persistent threat (APT) actor attributed to the exploitation of multiple Cisco SD-WAN vulnerabilities in 2026, including CVE-2026-20262.
A cloud-based SD-WAN solution from Cisco, impacted by CVE-2026-20262.
A Cisco-managed cloud SD-WAN service, impacted by CVE-2026-20262.
A FedRAMP-authorized SD-WAN solution for U.S. government agencies, impacted by CVE-2026-20262.