FBI and CISA are warning of APT actors targeting Fortinet FortiOS serversSecurity Affairs·Apr 2, 21:19 UTC · Apr 2, 2021VulnerabilityCVE-2018-13379CVE-2020-12812CVE-2019-5591+1 CVEs60
Critical RCE Flaw in Linux APT Allows Remote Attackers to Hack SystemsThe Hacker News·Jan 23, 08:19 UTC · Jan 23, 2019VulnerabilityCVE-2019-346260
China's Influence on National Network Vulnerability PublicationsRecorded Future·Oct 21, 00:00 UTC · Oct 21, 2025VulnerabilityCVE-2017-0199160
Gamaredon APT targeted a western government entity in UkraineSecurity Affairs·Feb 4, 11:50 UTC · Feb 4, 2022Vulnerability55
Kaspersky's analysis of servers compromised by Energetic Bear shows the APT operates on behalf of othersSecurity Affairs·Apr 15, 08:53 UTC · Apr 15, 2020Vulnerability55
Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange ServersRecorded Future·Dec 13, 00:00 UTC · Dec 13, 2018Vulnerability in the wildCVE-2021-26855CVE-2021-27065CVE-2021-26857+1 CVEs60
China-linked RedEcho APT took down part of its C2 domainsSecurity Affairs·Mar 29, 17:54 UTC · Mar 29, 2021Vulnerability55
Multiple APT groups are exploiting VPN vulnerabilities, NSA warnsSecurity Affairs·Oct 9, 20:37 UTC · Oct 9, 2019VulnerabilityCVE-2019-11510CVE-2019-11539CVE-2018-13379+3 CVEs60
Microsoft Patch Tuesday updates for May 2017 fix Zero Days exploited by Russian APT groupsSecurity Affairs·Oct 22, 11:02 UTC · Oct 22, 2017VulnerabilityCVE-2017-0261CVE-2017-0262CVE-2017-0263+2 CVEs60
US says APTs are using Fortinet bugs to gain initial access for future attacksThe Record·Jan 26, 00:00 UTC · Jan 26, 2023VulnerabilityCVE-2020-12812CVE-2019-559160
Exclusive - APT group exploited still unpatched zeroSecurity Affairs·Apr 22, 15:02 UTC · Apr 22, 2018Vulnerability55
Analyzing the vulnerability landscape in Q3 2025Kaspersky Securelist·Dec 3, 10:00 UTC · Dec 3, 2025VulnerabilityCVE-2018-0802CVE-2017-11882CVE-2017-0199+6 CVEs160
SideWinder APT targets maritime and nuclear sectors with enhanced toolsetSecurity Affairs·Mar 11, 11:22 UTC · Mar 11, 2025VulnerabilityCVE-2017-1188260
North Korea-linked APT Diamond Sleet supply chain attack relies on CyberLink softwareSecurity Affairs·Dec 6, 09:09 UTC · Dec 6, 2023VulnerabilityCVE-2023-4279360
Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077)Help Net Security·Dec 3, 00:00 UTC · Dec 3, 2021Vulnerability in the wildCVE-2021-44077CVE-2021-33617160
ESET: More Than 10 APT Groups Exploiting Recent Microsoft Exchange VulnerabilitiesInfosecurity Magazine·Mar 10, 15:18 UTC · Mar 10, 2021Vulnerability55
UK NCSC agency warns of APTs exploiting Enterprise VPN vulnerabilitiesSecurity Affairs·Oct 6, 10:17 UTC · Oct 6, 2019VulnerabilityCVE-2019-11510CVE-2019-11539CVE-2018-13379+3 CVEs60
CVE-2019-0797 Win 0Day exploited by FruitArmor, SandCat APT groupsSecurity Affairs·Mar 13, 20:54 UTC · Mar 13, 2019Vulnerability in the wildCVE-2019-0797CVE-2019-0808CVE-2019-5786+3 CVEs60
APT group used CVE-2018-8589 ZeroSecurity Affairs·Nov 14, 16:50 UTC · Nov 14, 2018VulnerabilityCVE-2018-8589CVE-2018-845360
CVE-2018-8453 exploited by FruityArmor APT in attacks aimed at Middle EastSecurity Affairs·Oct 10, 13:45 UTC · Oct 10, 2018VulnerabilityCVE-2018-8453CVE-2017-026360
The vulnerability landscape in Q1 2026Kaspersky Securelist·May 7, 08:42 UTC · May 7, 2026VulnerabilityCVE-2018-0802CVE-2017-11882CVE-2017-0199+10 CVEs160
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025Security Affairs·Mar 19, 14:48 UTC · Mar 19, 2026Vulnerability in the wildCVE-2025-6637660
Iran-linked Mint Sandstorm APT targeted US critical infrastructureSecurity Affairs·Apr 19, 09:52 UTC · Apr 19, 2023Vulnerability55
New Toddycat APT Targets MS Exchange Servers in Europe and AsiaInfosecurity Magazine·Jun 21, 17:30 UTC · Jun 21, 2022Vulnerability55
Iran-linked APT Rocket Kitten exploited VMware bug in recent attacksSecurity Affairs·Apr 26, 18:01 UTC · Apr 26, 2022VulnerabilityCVE-2022-2295460
APTs will exploit Palo Alto Networks's PANSecurity Affairs·Jun 30, 19:17 UTC · Jun 30, 2020VulnerabilityCVE-2020-202160
The Great Bank Robbery: the Carbanak APTKaspersky Securelist·Feb 16, 16:20 UTC · Feb 16, 2015Vulnerability55
Vulnerability landscape in Q4 2025Kaspersky Securelist·Mar 6, 10:00 UTC · Mar 6, 2026Vulnerability in the wildCVE-2018-0802CVE-2017-11882CVE-2017-0199+7 CVEs160
China-linked APT UAT-9686 abused now patched maximum severity AsyncOS bugSecurity Affairs·Jan 16, 10:17 UTC · Jan 16, 2026Vulnerability in the wildCVE-2025-2039360
PlushDaemon APT Targeted South Korean VPN SoftwareInfosecurity Magazine·Jan 22, 17:01 UTC · Jan 22, 2025Vulnerability55
Week in review: SonicWall critical firewalls flaw fixed, APT exploits WPS Office for Windows RCEHelp Net Security·Sep 1, 00:00 UTC · Sep 1, 2024VulnerabilityCVE-2024-40766CVE-2024-7262CVE-2924-7263+2 CVEs60
Analyzing the vulnerability landscape in Q1 2024Kaspersky Securelist·May 7, 10:00 UTC · May 7, 2024VulnerabilityCVE-2023-38831CVE-2023-40477CVE-2023-28252160
Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)Help Net Security·Jan 9, 12:23 UTC · Jan 9, 2024Vulnerability in the wildCVE-2023-3595CVE-2023-359660
Week in review: Discussing cybersecurity with the board, APT-style attacks, Patch Tuesday forecastHelp Net Security·Jan 9, 00:00 UTC · Jan 9, 2022Vulnerability55
FBI Issues Fortinet Flash WarningInfosecurity Magazine·May 28, 19:54 UTC · May 28, 2021VulnerabilityCVE-2018-13379CVE-2019-559160
⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & MoreThe Hacker News·Dec 27, 07:49 UTC · Dec 27, 2025VulnerabilityCVE-2025-20393CVE-2025-40602CVE-2025-23006+22 CVEs160
Pavlov’s Digital House: Russia Focuses Inward for Vulnerability AnalysisRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025VulnerabilityCVE-2018-814860
Vulnerability landscape analysis for Q2 2025Kaspersky Securelist·Aug 27, 10:00 UTC · Aug 27, 2025VulnerabilityCVE-2018-0802CVE-2017-11882CVE-2017-0199+6 CVEs160
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems WorldwideThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324CVE-2025-4299960