Advisories
Advisories & exploited vulnerabilities
Government advisories and actively exploited vulnerabilities, summarised with the action defenders need to take.
Government advisories and actively exploited vulnerabilities, summarised with the action defenders need to take and the deadline that applies. For every flaw CISA confirms is being exploited, see our daily KEV digest. Indian organisations must report significant incidents to CERT-In within six hours — here is how that works.
In this section
Another NetScaler flaw exploited: CVE-2026-88779 hits SAML setups; CISA and CERT-In say patch
Update now: iPhone fix for a targeted zero-day (iOS 26.7.1) and Chrome 154
Citrix patches two NetScaler zero-days already exploited; CISA sets 30 September deadline
Critical WordPress flaw exploited within hours of its patch; update to 7.1.2 now
