U.S. Cybersecurity And Infrastructure Security Agency — Cyber Attacks, Breaches & Threat Activity

Related Threat Clusters

• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• CISA Contractor Exposes Sensitive AWS Credentials on Public GitHub

  A contractor for the U.S. Cybersecurity and Infrastructure Security Agency (CISA) left a public GitHub repository named 'Private-CISA' exposed for six months, containing sensitive credentials including AWS GovCloud…

  41 articles · Updated May 19, 2026
• Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited

  Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows…

  74 articles · Updated November 28, 2025

Recent Intelligence Reports

• CISA Admin Reportedly Exposes AWS GovCloud Credentials in Public GitHub Repository — Gbhackers · May 19, 2026
• Fortinet unearths second FortiWeb firewall vulnerability in as many weeks — Sdxcentral · November 20, 2025

Related Entities