Government — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025

  Google has issued emergency updates to address the eighth zero-day vulnerability in Chrome for 2025. The flaw, identified as 466192044, was actively exploited in the wild, prompting the company to roll out fixes for…

  45 articles · Updated December 11, 2025
• China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign

  A new threat actor, UAT-7290, has been identified conducting cyberattacks on telecommunications infrastructure in South Asia. This operation is linked to a China-Nexus state-sponsored advanced persistent threat (APT)…

  1 article · Updated January 9, 2026
• CISA Directs Agencies to Address Gogs RCE Vulnerability Exploited in Zero-Day Attacks

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated that government agencies secure their systems against a critical Gogs vulnerability, tracked as CVE-2025-8110. This remote code execution…

  6 articles · Updated January 12, 2026
• CISA Warns U.S. After Cyberattack on Poland's Energy Grid Linked to Russian Hackers

  A cyberattack targeting Poland's energy grid in December has been linked to a Russian government-affiliated hacking group. The attack affected 30 wind and photovoltaic farms and prompted the Cybersecurity and…

  9 articles · Updated February 10, 2026
• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  48 articles · Updated July 15, 2026
• Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems

  Cisco has disclosed a critical authentication bypass vulnerability, CVE-2026-20182, affecting its Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated remote attackers to bypass authentication and…

  131 articles · Updated May 14, 2026
• Critical Joomla JCE Vulnerability Under Active Exploitation

  A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and…

  33 articles · Updated June 17, 2026
• Critical Command Injection Vulnerability in Arista VeloCloud Orchestrator Under Active Exploitation

  A critical command injection vulnerability, CVE-2026-16812, has been discovered in the Arista VeloCloud Orchestrator On-Prem platform, allowing unauthenticated remote attackers to execute arbitrary commands. This flaw,…

  23 articles · Updated July 28, 2026
• Major Cyber Attack on Victorian Government Schools Exposes Student Data

  Hackers have compromised the personal information of thousands of current and former students in Victorian government schools. The breach includes names, email addresses, year levels, and encrypted passwords, affecting…

  19 articles · Updated January 14, 2026
• Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild

  Google has issued an emergency update to address a high-severity zero-day vulnerability, CVE-2025-13223, in its Chrome browser. This flaw, linked to the V8 JavaScript engine, allows attackers to execute arbitrary code…

  54 articles · Updated November 24, 2025

Recent Intelligence Reports

• Known Exploited Vulnerabilities Catalog — www.cisa.gov · August 11, 2026
• Risk in AI-Generated Code How to Secure AI Code Before It Reaches Production Learn how 300 enterprise leaders are managing AI-driven open-source risk, remediation debt, and governance at scale. — thehacker.news · August 11, 2026
• Gunra Ransomware Builds a New Attack Network Through RaaS — Thecyberexpress · August 11, 2026
• US and South Korea warn of Gunra ransomware targeting govt agencies — Bleepingcomputer · August 11, 2026
• Korea, U.S. issue joint advisory on 'Gunra' ransomware attacks — Koreajoongangdaily · August 11, 2026
• S. Korea, U.S. issue joint advisory on 'Gunra' ransomware attacks — En.Yna.Co.Kr · August 11, 2026
• U.S., South Korean government agencies caution to be on lookout for Gunra ransomware gang — Cyberscoop · August 10, 2026
• CISA Advisory: #StopRansomware: Gunra Ransomware — Databreaches · August 10, 2026

Related Entities