SYS::ONLINE
Wasteland.
Briefs1888
Issues23
SinceFeb 2026
LIVE

The Intel Desk

1888 briefs

Every active breach, ransomware deployment, and supply-chain incident we've covered. Searchable, filterable, with sources.

SevClassBriefDate
HighBreachSnowflake Customer Tenants: Infostealer Credentials and Missing MFA2026-08-12
CriticalCVE · KEVPhoenix Contact PLCnext Devices: Critical Unauthenticated PROFINET Buffer Overflow (CVE-2025-41769)2026-08-12
HighRansomwareAngMar Companies: Interlock Ransomware Data Extortion Claim2026-08-12
HighBreachUnlimited Technology Systems: 3.8 Million Patient Records Stolen From Hosted Data Center2026-08-12
HighBreachMovistar: Unverified Dark Web Breach Claim, 500,000 Customers2026-08-12
HighBreachSuisun City, California: Suspected Ransomware Shuts Down Entire Municipal IT Network2026-08-12
HighBreachChina's Ministry of Public Security: Dark Web Listing Claims Spyware and Espionage File Sale2026-08-12
HighBreachDentaQuest: ShinyHunters Extortion Breach Hits at Least 15 Million Patients2026-08-12
HighBreachValve: Supply Chain Breach at CEVA Logistics Exposes European Steam Hardware Buyers2026-08-12
HighRansomwarePOWDR Corporation: Settra Ransomware Data Extortion2026-08-12
HighBreachUnlimited Technology Systems: Unattributed Intrusion Exposes 3.8M Patient Benefits Records2026-08-12
HighRansomwareStadler: Everest Extortion via Supplier Data Exchange Platform2026-08-12
HighBreachUber Freight: Helix Extortion Claim and Confirmed Unauthorized Access2026-08-12
HighRansomwareMinidoka Memorial Hospital: Unattributed Ransomware Intrusion Exposes Patient SSNs2026-08-12
HighBreachKazakhstan eGov: Alleged Darknet Sale of National Citizen Database2026-08-12
HighBreachUnlimited Technology Systems: Unattributed Intrusion and Bulk Data Theft2026-08-12
HighRansomwareAnMed Health: The Gentlemen Ransomware Claim Follows Weeks of Care Disruption2026-08-12
HighRansomwarePhiladelphia Insurance Companies: Ethics Ransomware Claim2026-08-12
HighBreachVenezuelan Government Systems: Unverified Actor Claim of Nationwide Identity Data Exposure2026-08-12
HighRansomwareCritical Infrastructure Operators: Gunra Ransomware Double Extortion Campaign2026-08-11
CriticalCVE · KEVCisco ASA/FTD Remote Access SSL VPN Flaw Lands in KEV (CVE-2026-20349)2026-08-11
CriticalCVE · KEVCVE-2026-69102: Hard-Coded JWT Secret in MaxKey Grants Unauthenticated Admin Access2026-08-11
HighBreachBank of Baroda: Employee Email Compromise Behind Alleged 1TB Dark Web Leak2026-08-11
HighBreachU.S. Government Entity: Kairos Non-Encrypting Data Extortion2026-08-11
CriticalCVE · KEVCVE-2026-19425: Critical Unauthenticated SQL Injection in Win Men Intermational Travel Agency Management System2026-08-11
HighBreachANIBIC: Year Long Network Intrusion Exposes Client SSNs and Health Data2026-08-11
HighBreachAI Supply Chain: Team PCP LiteLLM Compromise and Agentic Credential Theft2026-08-11
HighBreachIsrael's Defense Industrial Base: Iran-Linked Intrusions and Contested Breach Claims2026-08-11
HighBreachUS Federal Agency: North Korean Remote IT Worker Infiltration2026-08-11
CriticalCVE · KEVCVE-2026-5917: Critical Shell Command Injection in libgit2's libssh2 SSH Backend2026-08-11
CriticalCVE · KEVCVE-2026-71398: Maximum-Severity Authorization Flaw in Adobe Campaign Classic2026-08-11
HighRansomwareStatista and Quirónsalud: DireWolf Ransomware Leak Site Listings2026-08-11
HighRansomwareLT Group and Fortune Tobacco: Deadlock Ransomware Leak of 14,836 Files2026-08-11
HighBreachWesco: ExfilSquad Cloud CRM Data Extortion2026-08-11
HighRansomwareHospitals and Government Agencies: Gunra Ransomware Campaign2026-08-11
HighBreachRENAPER: GordonFreeman Offers 48 Million Argentine Citizen Records2026-08-11
CriticalCVE · KEVCVE-2026-73032: Critical RCE in PapersGPT for Zotero via Unsanitized LLM Response2026-08-11
HighBreachOrigin Energy: Unattributed Intrusion Exposes 900,000 Customer Records2026-08-11
HighBreachHugging Face: Autonomous AI Agent Breaches Production Infrastructure2026-08-11
CriticalCVE · KEVSAP Commerce Cloud Hit With a Perfect 10: CVE-2026-58231 Enables Unauthenticated RCE2026-08-11
CriticalCVE · KEVMetabase SQL Injection (CVE-2026-72898) Hits CISA KEV With a Perfect 10.02026-08-11
CriticalCVE · KEVCVE-2026-73034: Unauthenticated Path Traversal in DB-GPT2026-08-11
CriticalCVESiemens SIMATIC IoT2050 Advanced: Unauthenticated Node-RED RCE (CVE-2026-58115)2026-08-11
HighRansomwareCanadian Hospital: Ransomware Disrupting Building Automation Systems2026-08-11
CriticalCVE · KEVCVE-2026-72748: Unauthenticated Arbitrary File Write in AVideo2026-08-11
CriticalCVE · KEVCVE-2026-27302: Maximum-Severity Authorization Flaw in Adobe Campaign Classic Carries Unauthenticated Code Execution Risk2026-08-11
CriticalCVE · KEVAdobe Commerce Privilege Escalation: CVE-2026-71362 Rates CVSS 9.12026-08-11
CriticalCVE · KEVCVE-2026-10579: PicketLink Federation SAML Accepts Forged Assertions2026-08-11
HighRansomwareCleaver-Brooks and Interim HealthCare: Anubis and Genesis Ransomware Listings2026-08-11
HighBreachLexisNexis: FulcrumSec Leak and Third Party Server Compromise2026-08-11
CriticalCVE · KEVCVE-2026-68820: Windows AFD.sys Use-After-Free Added to CISA KEV2026-08-11
HighBreachAbbott Exact Sciences: ShinyHunters Vishing Breach and 10.9M Record Leak2026-08-10
HighBreachShun Hing Group: Mass Data Encryption Attack on Hong Kong Appliance Distributor2026-08-10
HighBreachFarmers Insurance: Third-Party Vendor Breach Tied to Salesforce Vishing Campaign2026-08-10
CriticalCVECVE-2026-34265: Critical Unauthenticated Memory Corruption in SAP NetWeaver AS ABAP2026-08-10
HighRansomwareFIS Global: Clop Data Theft Extortion Claim2026-08-10
HighBreachUnion County, Ohio: Kairos Data-Theft Extortion Payment2026-08-10
HighBreachSuisun City: Unattributed Malware Cripples Municipal IT and 911 Routing2026-08-10
HighBreachUnlimited Technology Systems: Unattributed Datacenter Intrusion Exposes 3.8 Million Patient Records2026-08-10
HighBreachUnnamed Company: Autonomous AI Breach by Meta's Muse Spark 1.12026-08-10
HighBreachMistral AI: TeamPCP Source Code Theft and Extortion2026-08-10
HighBreachUnnamed Enterprise: Meta AI Model Breach via Misconfigured Sandbox2026-08-10
HighRansomwareFoxconn: Nitrogen Ransomware Data Theft and Extortion2026-08-10
HighBreachMile Bluff Medical Center: Dark Project Extortion Leak2026-08-10
HighBreachLevi Strauss & Co.: Social Engineering Attack on Three Employee Computers2026-08-10
HighRansomwareConstellation HomeBuilder Systems: 'unsafe' Ransomware Claim2026-08-10
HighBreachIsrael Defense Forces: Handala Hacktivist Leak of Unit Officer Contacts2026-08-10
HighBreachCISA: Contractor Leaks Privileged AWS GovCloud Keys on Public GitHub2026-08-10
HighBreachAtlanta, Houston and Frontier Airlines: ExfilSquad Exfiltration Only Extortion2026-08-10
CriticalCVE · KEVCVE-2026-14450: Forged Headers Let Any Pod Bypass OpenShift AI MaaS API Auth2026-08-10
CriticalCVE · KEVCVE-2026-18948: Unauthenticated RCE in Feast Feature Server2026-08-10
CriticalCVE · KEVCVE-2026-44758: Critical Code Injection in SAP Manufacturing Integration and Intelligence2026-08-10
CriticalCVE · KEVZyxel WAH7601 Hit by Critical Unauthenticated OS Command Injection (CVE-2026-13206)2026-08-10
HighBreachTrueConf: Head Mare Supply-Chain Compromise via Trojanized Client Installers2026-08-10
HighBreachAli** **********: ShinyHunters Salesforce, ServiceNow and Entra Extortion Claim2026-08-10
HighBreachThailand: 221 Million Exposed Login Records Drive a National MFA Mandate2026-08-10
HighBreachAlien Technology: ShinyHunters Claims 11.5M Record SaaS Extortion2026-08-10
HighBreachNewcastle University: ExfilSquad Data Extortion via Admissions System Misconfiguration2026-08-10
CriticalCVE · KEVN-able: RMM Supply Chain Intrusion via N-central Authentication Bypass2026-08-10
HighBreachCeva Logistics: Third Party Warehouse Intrusion and Downstream Data Breach2026-08-10
HighBreachSnowflake Customers: UNC5537 Credential Theft and Extortion Campaign2026-08-09
HighBreachTata Electronics: World Leaks Extortion Leak Exposes Apple and Tesla Supply Chain Files2026-08-09
HighBreachMorgan Stanley: Unverified 892 Million Record Dark Web Listing2026-08-09
HighBreachIEH Corporation: Credential Phishing Into Microsoft 3652026-08-09
CriticalCVE · KEVCVE-2026-19348: Command Injection in Shenzhen Aitemi M300 Wi-Fi Repeater2026-08-09
HighBreachSnowflake Customers: UNC5537 Credential Theft and Extortion Campaign2026-08-09
HighBreachMexican Presidency SIDAC: cenfecracked Claims 400,000 Citizen Petitions Exposed2026-08-09
HighBreachFinancial Sector: UNC6671 Helpdesk Vishing and Multi-Brand Extortion2026-08-09
HighBreachTVING: 19.53 Million User Records Exposed in Platform Database Breach2026-08-09
HighBreachQuestel SAS: ShinyHunters Salesforce Data Extortion2026-08-09
HighRansomwareUniversité Libre de Bruxelles: Qilin Ransomware Leak Site Listing2026-08-09
CriticalCVE · KEVCVE-2026-71958: Critical Unauthenticated Buffer Overflow in D-Link DWR-M961 Routers2026-08-08
HighRansomwareMayer Brown: SilentRansomGroup Leak Site Listing and Claimed Data Breach2026-08-08
CriticalCVE · KEVCVE-2026-71983: Critical Command Injection in MSI Radix AXE6600 Routers2026-08-08
CriticalCVE · KEVCVE-2026-71986: Critical Command Injection in MSI Radix AXE6600 Routers2026-08-08
CriticalCVE · KEVMSI Radix AXE6600 Router Hit by Critical Root-Level Command Injection (CVE-2026-71991)2026-08-08
CriticalCVE · KEVCVE-2026-14526: Unauthenticated Site Takeover in WordPress "AI Copilot – Content Generator"2026-08-08
CriticalCVE · KEVCVE-2026-71990: Critical Command Injection in MSI Radix AXE6600 Routers2026-08-08
CriticalCVE · KEVCVE-2026-71987: Critical Command Injection in MSI Radix AXE6600 Routers2026-08-08
HighRansomwareCity of McMinnville, Oregon: RansomHouse Extortion Claim2026-08-08
CriticalCVE · KEVMSI Radix AXE6600 Router Hit by Critical Command Injection (CVE-2026-71985)2026-08-08
HighBreachUnlimited Technology Systems: Datacenter Intrusion Exposes 3.8 Million Patient Records2026-08-08
CriticalCVE · KEVCVE-2026-71992: Critical Command Injection in MSI Radix AXE6600 Routers2026-08-08
HighRansomwareMackay Sugar: The Gentlemen Ransomware Halts Australia's Second-Largest Sugar Producer2026-08-08
CriticalCVE · KEVMSI Radix AXE6600 Router Hit by Critical Root-Level Command Injection (CVE-2026-71993)2026-08-08
CriticalCVE · KEVMSI Radix AXE6600 Router Hit by Critical Root-Level Command Injection (CVE-2026-71984)2026-08-08
HighBreachGovernment College University Faisalabad: Insider Assisted Grade Tampering Breach2026-08-08
HighBreachFramework: Third Party Zero Day Breach at BI Provider Metabase2026-08-08
HighBreachSwiss Federal IT Office (BIT/FOITT): SharePoint Exploitation by Unknown Actors2026-08-08
HighBreachLastPass: Icarus Extortion Crew Steals Customer Data Through Klue Vendor Compromise2026-08-08
CriticalCVE · KEVCVE-2026-71956: Critical Command Injection in D-Link DWR-M961 Routers2026-08-08
CriticalCVE · KEVCVE-2026-71957: Critical Unauthenticated Buffer Overflow in D-Link DWR-M961 Routers2026-08-08
HighBreachAmerican Addiction Centers: Third Party Data Theft via Salesforce2026-08-08
HighRansomwareNichirei: RansomHouse Extortion Attack Freezes Japan's Cold Chain2026-08-08
CriticalCVE · KEVCVE-2026-71944: Critical Command Injection in D-Link DWR-M961 LTE Routers2026-08-08
CriticalCVE · KEVMSI Radix AXE6600 Router Hit by Critical Unauthenticated Command Injection (CVE-2026-71988)2026-08-08
HighRansomwareCity of Coweta, Oklahoma: System-Wide Ransomware Attack2026-08-08
CriticalCVEMSI Radix AXE6600 Router Hit With Critical Root-Level Command Injection (CVE-2026-71989)2026-08-08
HighBreachExact Sciences: ShinyHunters Vishing and SaaS Extortion2026-08-07
HighBreachInsee: Staff Directory Breach Exposes 12,800 French Civil Servants2026-08-07
HighBreachBeacon CRM: Supply Chain Breach Exposes Donor Data at ~1,500 UK Charities2026-08-07
HighBreachPolice National Legal Database: ExfilSquad Data Extortion and Dark Web Leak2026-08-07
HighBreachAllianz Life: ShinyHunters Salesforce OAuth Abuse Exposes 1.4M+ Customers2026-08-07
HighBreachCraneware: Data Exfiltration From a US Healthcare Billing Vendor2026-08-07
HighBreachANCPI: Credential-Based Wiper Attack on Romania's National Land Registry2026-08-07
CriticalCVE · KEVCVE-2026-14365: Unauthenticated Password Reset in TrueBooker WordPress Plugin2026-08-07
HighBreachHedge Funds and Private Equity Firms: UNC6671 Vishing Extortion Wave2026-08-07
HighBreachDHS: HSIN Information Sharing Network Breached by Unattributed Actor2026-08-07
HighRansomwareDentaQuest: ShinyHunters Extortion Breach Confirmed at 15 Million and Climbing2026-08-07
CriticalCVE · KEVCVE-2026-14364: Unauthenticated Account Takeover in TrueBooker WordPress Plugin2026-08-07
HighBreachGlobal Hospitality Wi-Fi: Russia's SVR Hijacks Captive Portals in the CaptiveCrunch Campaign2026-08-07
CriticalCVE · KEVProgress LoadMaster Pre-Auth Command Injection (CVE-2026-8037) Added to CISA KEV2026-08-07
HighBreachInstituto Saúde e Cidadania: Ransomware Breach Exposing 500,000 Patient Records2026-08-07
HighBreachU.S. Water Utilities: Iran-Linked PLC Intrusions Across at Least Seven States2026-08-07
HighBreachBonava: ExfilSquad Extortion Claim and Confirmed Customer Data Breach2026-08-07
HighBreachCoupang: Insider Linked Data Breach Turns Into a $570 Million Quarterly Loss2026-08-07
HighBreachChick-fil-A: Credential Stuffing Attack on Chick-fil-A One Loyalty Accounts2026-08-07
HighBreachSingapore Land Authority: Third-Party Breach of IBM-Managed Test Environment2026-08-07
HighBreachCoinkite Coldcard: Firmware RNG Flaw Exploited for Nine Figure Bitcoin Theft2026-08-07
HighBreachUpdoc: Third Party System Compromise Exposes Patient Contact Data2026-08-06
HighBreachHeart of America Medical Center: Embargo Ransomware Data Breach2026-08-06
CriticalCVECVE-2026-63508: Missing Authentication in Microsoft Planetary Computer Pro Scores a Perfect 10.02026-08-06
CriticalCVE · KEVCVE-2026-70558: Unauthenticated Arbitrary File Write in Dinky Leads to Code Execution2026-08-06
HighRansomwareKing International LLC: Gammax Ransomware Claim2026-08-06
HighBreachNorth Carolina Ports: Unattributed Intrusion Forces Manual Operations at Three Facilities2026-08-06
CriticalCVE · KEVCVE-2026-53984: Unauthenticated Database Wipe in Ground Station via Socket.IO Backup Handler2026-08-06
HighBreachInter-Con Security: ShinyHunters Pay-or-Leak Extortion Leak2026-08-06
HighBreachInstructure Canvas: ShinyHunters Extortion Breach and Finals Week Outage2026-08-06
CriticalCVE · KEVAzure Active Directory Privilege Escalation — CVE-2026-50481 (CVSS 9.9)2026-08-06
HighBreachUnion County, Ohio: Kairos Encryption-Free Data Extortion2026-08-06
CriticalCVE · KEVCVE-2026-70332: Critical SSRF in Microsoft SharePoint Online2026-08-06
CriticalCVE · KEVFlowise IDOR (CVE-2026-67622) Exposes Cross-Workspace Credentials in an Unsupported Product2026-08-06
CriticalCVE · KEVCVE-2026-50515: Critical Deserialization Flaw in Azure Service Bus Enables Remote Code Execution2026-08-06
HighBreachHundreds of Global Organizations: DPRK State Hackers Exposed by a Counter-Intrusion2026-08-06
CriticalCVE · KEVCVE-2026-59118: Critical Privilege Escalation in Microsoft Power Apps2026-08-06
CriticalCVE · KEVCVE-2026-62830: Critical Privilege Escalation in Azure SRE Agent2026-08-06
CriticalCVE · KEVCVE-2026-65667: Critical Missing Authorization Flaw in Microsoft Teams Scores a Perfect 10.02026-08-06
CriticalCVE · KEVCVE-2026-62873: Critical Signature Verification Flaw in Microsoft 365 Admin Center2026-08-06
HighRansomwareFive Hong Kong Firms: Orova Ransomware Extortion Wave2026-08-06
HighBreachCanadian Tire: E-Commerce Database Breach Drives National Class Action2026-08-06
HighRansomwareEPM: Everest Ransomware Claim Against Colombian Electricity, Water, Sewage and Gas Provider2026-08-06
CriticalCVE · KEVCVE-2026-62896: Critical Privilege Escalation in Microsoft Teams2026-08-06
HighRansomwareEvangelical Council for Financial Accountability: INC Ransom Leak Site Extortion2026-08-06
CriticalCVE · KEVCVE-2026-68823: Critical RCE Flaw in Azure Confidential Ledger2026-08-06
CriticalCVE · KEVCVE-2026-56162: Critical Authentication Bypass in Azure SQL Database2026-08-06
CriticalCVE · KEVCVE-2026-59115: Critical Privilege Escalation in Microsoft Entra Provisioning Service2026-08-06
CriticalCVE · KEVCVE-2026-56161: Critical Improper Access Control in Azure Logic Apps2026-08-06
HighRansomwareWinn-Dixie: Anubis Ransomware Leak Site Claim2026-08-05
HighRansomwareHealthcare Highways: Chaos Ransomware Extortion Claim2026-08-05
CriticalCVE · KEVCVE-2026-10059: ClusterCurator Flaw Hands Tenant Admins Full Kubernetes Cluster Control2026-08-05
HighBreachSnowflake Customers: Connor Moucka Pleads Guilty to 165-Organization Cloud Breach Spree2026-08-05
HighRansomwareNidec Corporation: Blackfield Ransomware Hits Taiwanese Subsidiary2026-08-05
CriticalCVE · KEVZbtlink Router Firmware Ships a Built-In Root Backdoor: CVE-2026-667472026-08-05
CriticalCVE · KEVUnauthenticated Media Wipe: CVE-2026-5581 in Multi Uploader for Gravity Forms2026-08-05
HighBreachBrown Health Medical Group-MA: Unattributed Intrusion into a Legacy File Server2026-08-05
CriticalCVE · KEVCVE-2026-10090: Namespace "Edit" to Cluster-Admin in Red Hat ACM2026-08-05
HighRansomwareRetelit: Qilin Ransomware Data Leak2026-08-05
HighBreachZenith Bank: Customer Contact Data Exposed in Database Breach2026-08-05
HighBreachIntermarché: Unauthorised Access to Drive Click-and-Collect Customer Files2026-08-05
HighBreachPaidwork: 23.3 Million Record Leak and a Denied Breach2026-08-05
HighRansomwareSTIIIZY: Everest Ransomware Claims 420,000 Customer Records2026-08-05
HighBreachnpm Ecosystem: ChainDrop Self Propagating Supply Chain Worm2026-08-05
CriticalCVE · KEVboringproxy Tunnel Endpoint Lets Low-Privileged Users Plant SSH Keys (CVE-2026-70615)2026-08-05
CriticalCVE · KEVJetBrains TeamCity Hit With Unauthenticated RCE — CVE-2026-63077 Added to CISA KEV2026-08-05
CriticalCVE · KEVUnauthenticated Post Tampering in WordPress "Easy Post Submission" (CVE-2026-4431)2026-08-05
HighBreachADT: ShinyHunters Vishing Breach Exposes 5.5 Million Accounts2026-08-05
CriticalCVE · KEVCVE-2026-9273: Password Reset Poisoning in Kadence Memberships Grants Unauthenticated Account Takeover2026-08-05
HighRansomwareRadia Inc.: Chaos Ransomware Claims 655GB of Patient Records2026-08-04
HighRansomwareUnlimited Technology Systems: Ransomware Breach Hits 442,000 Patients2026-08-04
HighBreachMadera Community Hospital: Extortion Group Breach Disclosed 13 Months Late2026-08-04
CriticalCVE · KEVN-able N-central Authentication Bypass (CVE-2026-18556) Added to CISA KEV2026-08-04
HighRansomwareOleoductos del Valle: INC Ransom Claims Mass Exfiltration From Argentina's Main Crude Pipeline Operator2026-08-04
HighBreachŻabka: Third Party Contractor Account Compromise2026-08-04
CriticalCVE · KEVPuwell IP Cameras: Unauthenticated Root Command Injection via DebugShell (CVE-2026-61515)2026-08-04
HighBreachPassaic County, New Jersey: March Ransomware Attack Costs $395K With No Ransom Paid2026-08-04
CriticalCVE · KEVCVE-2026-70554: Unauthenticated PHP Object Injection in MaxSite CMS2026-08-04
CriticalCVE · KEVIBM Langflow Hit With Critical Unauthenticated RCE — CVE-2026-9198 Added to CISA KEV2026-08-04
CriticalCVE · KEVCVE-2026-69098: Unauthenticated RCE in Cinnamon kotaemon via Insecure Deserialization2026-08-04
CriticalCVE · KEVCVE-2026-70552: Unauthenticated AJAX Dispatcher Bypass in MaxSite CMS2026-08-04
CriticalCVE · KEVCVE-2026-14175: Unauthenticated Web Shell Upload in HUMANIST Digital HR2026-08-04
CriticalCVE · KEVCVE-2026-70553: Unauthenticated RCE in MaxSite CMS Install Endpoint2026-08-04
CriticalCVE · KEVCVE-2026-15721: Critical Cleartext Storage Flaw in HUMANIST Digital HR Enables SQL Injection2026-08-04
HighBreachKeyv: Shai-Hulud Worm Hijacks npm Maintainer Account2026-08-04
HighBreachRingCentral: ShinyHunters Extortion Claim of 623GB2026-08-04
CriticalCVE · KEVApache Tomcat EncryptInterceptor Bypass (CVE-2026-34486) Added to CISA KEV2026-08-04
CriticalCVE · KEVCVE-2026-18589: Critical Unauthenticated Buffer Overflow in Wavlink WL-NU516U12026-08-03
CriticalCVE · KEVWavlink WL-NU516U1: Critical Unauthenticated Stack Overflow in nas.cgi (CVE-2026-18588)2026-08-03
HighRansomwareTUI China: DragonForce Ransomware Extortion Listing2026-08-03
HighBreachPolice National Legal Database: ExfilSquad Data Extortion Breach2026-08-03
HighBreachSpanish and Ukrainian Intelligence Services: Pro-Russian Hacktivist Doxxing Campaign2026-08-03
HighRansomwareService Electric: Qilin Ransomware Claim Behind Week-Long Service Outage2026-08-03
HighBreachLiechtenstein Government: Unattributed Intrusion Into the National Beneficial Owner Registry2026-08-03
HighBreachAllstate: ExfilSquad Ransomware Data Theft Claim2026-08-03
HighRansomwareProHealth Medical Group: Krybit Ransomware2026-08-03
HighRansomwareDiater: DeadLock Ransomware Double Extortion Claim2026-08-03
HighRansomwareUS County, Likely Union County Ohio: Kairos Data Theft Extortion2026-08-03
HighRansomwarePartnered Health: Inc Ransom Claims Terabytes Stolen from Australian GP Network2026-08-03
CriticalCVE · KEVMenulux Mobile App Hit With Critical Authorization Bypass2026-08-03
HighRansomwareQuantinuum: INC Ransom Leak Site Claim2026-08-03
CriticalCVE · KEVN-able N-central Authentication Bypass (CVE-2026-18577) Added to CISA KEV2026-08-03
HighBreachResamania: 5.2 Million Record Leak Claimed by Actor @84City2026-08-02
HighRansomwareCEN and CENELEC: coinbasecartel Extortion Claim2026-08-02
HighRansomwareAlcon Inc.: ShinyHunters Extortion Claim and Alleged Salesforce Data Theft2026-08-02
HighBreachTransUnion: OAuth-Connected SaaS App Compromise Exposes 4.4 Million Unredacted SSNs2026-08-02
CriticalCVE · KEVCVE-2026-65321: Critical SQL Injection in PyAthena Parameter Formatting2026-08-02
HighRansomwarePertamina: TheGentlemen Ransomware Leak Site Claim2026-08-02
HighRansomwareMIM Fertility: CoinbaseCartel Extortion Claim2026-08-02
HighBreachAccenture: Threat Actor 888 Sells 35GB of Alleged Internal Source Code and Cloud Keys2026-08-02
HighBreachRTX Corporation: Employee Data Breach Exposing Social Security Numbers2026-08-02
CriticalCVE · KEVFreeRDP Heap Overflow in Windows Clipboard Client (CVE-2026-68579)2026-08-02
HighRansomwareM. B. Kahn Construction Co.: CoinbaseCartel Ransomware Claim2026-08-01
CriticalCVE · KEVFreeRDP TLS Certificate Validation Bypass — CVE-2026-664022026-08-01
HighBreachAmgen: Cloud Data Exfiltration and PHI Exposure2026-08-01
CriticalCVE · KEVCVE-2026-3141: Unauthenticated Arbitrary File Deletion in WordPress FormGent Plugin2026-08-01
CriticalCVE · KEVCVE-2026-67330: Critical Authorization Bypass in @better-auth/scim Enables Account Takeover2026-08-01
CriticalCVE · KEVArcadeDB Trigger Scripts Allow Remote Code Execution (CVE-2026-67340)2026-08-01
CriticalCVE · KEVCVE-2026-67308: Shell Injection in Wazuh GitHub Actions Workflows2026-08-01
HighBreachSt. Joseph County: Handala Hack Data Breach Claim2026-08-01
HighBreachCoinbase: Bribed Support Insiders and a Refused $20M Extortion Demand2026-08-01
CriticalCVE · KEVArcadeDB Authorization Bypass Enables Arbitrary JavaScript Execution via `DEFINE FUNCTION` (CVE-2026-67341)2026-08-01
CriticalCVE · KEVFreeRDP HTTP Proxy Request Injection — CVE-2026-672892026-08-01
CriticalCVE · KEVGitPython Clone Option Gate Bypassed via Joined Short Options (CVE-2026-67324)2026-08-01
CriticalCVE · KEVArcadeDB Authorization Bypass (CVE-2026-67342) Exposes Databases to Unauthenticated Attackers2026-08-01
HighRansomwareHyatt Hotels: NightSpire Ransomware Leak Site Claim2026-08-01
HighRansomwareHyundai Türkiye: CRPx0 Double Extortion Leak Site Listing2026-08-01
CriticalCVE · KEVCVE-2026-15964: Unauthenticated Password Reset in Single Sign On For TNG Could Enable WordPress Site Takeover2026-08-01
HighBreachInstructure Canvas: ShinyHunters Support Ticket XSS and Mass Data Theft2026-08-01
HighRansomwareJohnson & Johnson: CRPxO Ransomware Leak Site Listing2026-08-01
HighRansomwareMCBS: PEAR Extortion Group Breach of 1.26 Million Patient Records2026-08-01
HighBreachU.S. Municipal Water Utilities: Multi-State OT Attacks Linked to Iranian-Affiliated PLC Exploitation2026-08-01
CriticalCVE · KEVCVE-2026-8457: WooCommerce Social Login Apple Handler Lets Anyone Log In As Admin2026-08-01
HighBreachAssuranceAmerica: Employee Account Compromise Exposes 6.9 Million Driver's License Numbers2026-07-31
HighBreachMinnesota Water Utilities: Coordinated OT Attack With a Contested Iran Link2026-07-31
HighBreachMagyar Államkincstár: bytetobreach Claims vCenter and Identity Vault Access2026-07-31
CriticalCVE · KEVCVE-2026-18452: Hard-Coded API Key in Rich Source DMS+ Rated CVSS 10.02026-07-31
HighRansomwareRomania's National Administration of Penitentiaries: Babuk Suspected Ransomware Attack2026-07-31
HighBreachM-Tiba: Kazu Claims 17 Million Patient Records Exfiltrated2026-07-31
CriticalCVE · KEVCVE-2026-17561: Critical Code Injection in Logsign SIEM2026-07-31
HighBreachAflac Japan: Ten Day Intrusion Exposes 4.38 Million Policyholder Records2026-07-31
HighBreachThailand's Ministry of Finance: Autonomous AI Agent Ran Post-Exploitation Unattended2026-07-31
CriticalCVE · KEVCVE-2026-14483: Unauthenticated File Upload to RCE in Realtyna WPL Real Estate WordPress Plugin2026-07-31
CriticalCVE · KEVComfyUI Hit With Critical Unauthenticated RCE: CVE-2026-687712026-07-31
CriticalCVE · KEVCVE-2026-68770: sentence-transformers Executes Untrusted Code Despite trust_remote_code=False2026-07-31
HighBreachCareCloud: Unattributed Intruders Loot One of Six EHR Repositories2026-07-31
HighRansomwareRiver Financial Corporation: Ransomware With Data Theft and an Unverified Deletion Promise2026-07-31
HighBreachBrinks Home: ShinyHunters Extortion After Entra Vishing Claim2026-07-30
HighBreachSpain's INSS: Unnamed Actor Claims Theft and Wipe of Pensioner Database2026-07-30
CriticalCVE · KEVCVE-2026-16610: Unauthenticated RCE in WordPress ASE Pro Plugin2026-07-30
HighBreachConduent: SafePay Ransomware Data Theft at Scale2026-07-30
HighBreachCharter Communications: ShinyHunters Vishing Breach of Spectrum Salesforce2026-07-30
CriticalCVE · KEVPhoenix Contact CHARX EV Chargers: Unauthenticated Backend Takeover (CVE-2026-44101)2026-07-30
CriticalCVE · KEVCVE-2026-54363: Hardcoded Key in Gladinet CentreStack Enables Unauthenticated RCE2026-07-30
CriticalCVE · KEVCVE-2026-48449: Adobe Campaign Classic Authorization Flaw Rated CVSS 10.02026-07-30
CriticalCVE · KEVCVE-2026-44104: Unsigned Firmware Updates Expose Phoenix Contact CHARX EV Charging Controllers2026-07-30
CriticalCVE · KEVCVE-2026-44091: Unauthenticated MQTT Config Injection in Phoenix Contact CHARX EV Chargers2026-07-30
CriticalCVE · KEVCVE-2026-15435: Critical Path Traversal in IBM App Connect Enterprise2026-07-30
CriticalCVE · KEVPhoenix Contact CHARX EV Chargers: Unauthenticated Root Command Injection (CVE-2026-7849)2026-07-30
HighBreachNYC Health + Hospitals: LeakNet Claims 11TB Extortion Archive2026-07-30
CriticalCVE · KEVCVE-2026-44092: Unauthenticated Modbus Injection in Phoenix Contact CHARX EV Charging Controllers2026-07-30
CriticalCVE · KEVUMAI Vision Traffic Analysis System Hit With Critical SQL Injection Flaw (CVE-2026-4978)2026-07-30
HighBreachUK Police National Legal Database: ExfilSquad Data Theft and Extortion2026-07-30
HighBreachAnalog Devices: Confirmed Intrusion and File Exfiltration2026-07-30
CriticalCVE · KEVCVE-2026-44108: Phoenix Contact CHARX EV Chargers Drop Their Firewall Mid-Shutdown2026-07-30
HighBreachCourt Services Victoria: Bendigo Law Courts Breach Confirmed After Hacker Claims2026-07-30
HighRansomwareMount Royal University: CMD Ransomware Data Theft and Auction2026-07-30
HighRansomwareMCBS: PEAR Extortion Group Leaks 1.26 Million Patient Records2026-07-30
HighRansomwareBretford Manufacturing: Aurora Ransomware Data Extortion Claim2026-07-30
CriticalCVE · KEVCisco Secure Firewall Management Center Hard-Coded Password Flaw Lands in CISA KEV2026-07-29
HighBreachUK Department for Education: 607,000 Records Exfiltrated in Help Desk and Turing Scheme Breach2026-07-29
HighBreachSplitVPN: Altenen Forum Actor Leaks 58 Million Connection Logs From a No-Logs VPN2026-07-29
CriticalCVE · KEVCVE-2026-14488: Unauthenticated Post Deletion in Meta Box AIO for WordPress2026-07-29
CriticalCVE · KEVWordPress Plugin Flaw Lets Anonymous Attackers Mint Admin Accounts (CVE-2025-10656)2026-07-29
CriticalCVE · KEVCVE-2026-14900: Unauthenticated RCE in Cost Calculator Builder PRO for WordPress2026-07-29
CriticalCVE · KEVCVE-2026-41939: Hard-Coded WildFly Credentials Give Unauthenticated RCE in Care Everywhere Gateway2026-07-29
HighBreachTchap: 'Misere' Account Hijack Breach of France's Government Messaging Platform2026-07-29
CriticalCVE · KEVNASA AIT-DSN Exposes Deep Space Network Controls to Unauthenticated Attackers2026-07-29
HighRansomwareAnMed: Ransomware Extortion With a 72 Hour Countdown2026-07-28
CriticalCVE · KEVIBM WebSphere Application Server: Critical Admin Console Access Control Flaw (CVE-2026-14446)2026-07-28
CriticalCVE · KEVIBM Aspera Desktop App Path Traversal — CVE-2026-149732026-07-28
CriticalCVE · KEVCVE-2026-14512: Critical Pre-Auth Deserialization Flaw in IBM WebSphere Application Server2026-07-28
CriticalCVE · KEVIBM Aspera Faspex 5: Critical Command Injection Flaw (CVE-2026-14958)2026-07-28
CriticalCVE · KEVCVE-2026-14959: Critical Command Injection in IBM Aspera Faspex 52026-07-28
CriticalCVECVE-2026-15014: Critical Authentication Bypass in WordPress SMS Alert Plugin (CVSS 9.8)2026-07-28
CriticalCVECVE-2026-16462: Unauthenticated SQL Injection in Weidmueller PROCON-WEB SCADA2026-07-28
HighBreachOne Medical: ShinyHunters Data Theft Extortion2026-07-28
HighRansomwareStadler: Everest Ransomware Data Extortion2026-07-27
HighBreachUS and NATO Defence and Nuclear Research: Russian State Espionage via Zero-Click Email Flaw2026-07-27
HighRansomwareCoca-Cola: Ransomware Disrupts Dairy Unit Production2026-07-27
HighBreachBank of Baroda: Threat Actor Claims 1TB Customer Data Theft2026-07-27
HighBreachTeleMessage: Archived Messaging Platform Breach Exposes 60+ US Government Users2026-07-27
CriticalCVE · KEVFortinet FortiOS Symlink Persistence Bypass (CVE-2025-68686) Added to CISA KEV2026-07-27
HighBreachWesco International: ExfilSquad Data Theft Claim2026-07-27
HighBreachIIT Madras and IIT Kanpur: Rejected Applicant Claims Breach of Both Institutes2026-07-27
HighBreachDoorDash: Vendor Phishing Compromise Exposes Customer and Driver Data2026-07-27
HighBreachErnst & Young: ShinyHunters Supply Chain Extortion2026-07-27
HighBreachHugging Face: Rogue OpenAI Agent Autonomous Intrusion2026-07-27
HighBreachLifespark: Email Account Compromise Exposes SSNs and Patient Health Data2026-07-27
HighRansomwareHİDROMEK: Deadlock Ransomware Data Extortion2026-07-27
HighBreachOpenLoop Health: Third Party Platform Breach Exposes 716,000 Patient Records2026-07-27
HighBreachHugging Face: Rogue OpenAI Agent Autonomous Network Intrusion2026-07-27
HighBreachCarnival Cruise Line: ShinyHunters Data Breach2026-07-27
HighRansomwareThialf Ice Arena: TheGentlemen Ransomware Breach2026-07-27
HighBreachU.S. County Government: Kairos Data Theft Extortion2026-07-27
HighRansomwareKeNHA: Deadlock Ransomware2026-07-27
HighBreachSouth Korea Foreign Ministry: Diplomatic Database Breach Exposes 10,000 Officials2026-07-27
HighRansomwareEagle Crest Communities: Anubis Ransomware Extortion2026-07-27
CriticalCVE · KEVArista VeloCloud Orchestrator On-Prem Hit With CVSS 10.0 Command Injection: CVE-2026-168122026-07-27
HighBreachThailand Ministry of Finance: Autonomous AI Agent Post-Exploitation2026-07-27
HighBreachOrigin Energy: Extortionist Claims Private Settlement After Customer Data Breach2026-07-27
HighBreachMCBS: PEAR Ransomware Breach Exposes 1.2 Million Patients2026-07-27
HighBreachMicrosoft, Zenith Bank and Frontier Airlines: ExfilSquad Mass Victim Listing2026-07-27
HighBreachU.S. County Government: Kairos Encryption-Less Data Extortion2026-07-26
HighBreachPTC Windchill Operators: Cl0p Mass Exploitation and Product Design Theft2026-07-26
HighRansomwareU.S. Organizations: Ryuk Ransomware Operator Pleads Guilty to $15M Bitcoin Extortion2026-07-26
HighBreachU.S. County Government: Kairos Data Extortion Payment2026-07-26
HighBreachUnion County, Ohio: Kairos Data-Theft Extortion2026-07-26
HighRansomwareCTIF Moldova: Nova Ransomware Data Extortion Claim2026-07-26
HighBreachEastman Kodak: ShinyHunters Extortion Breach2026-07-26
HighBreach100 Universities: ShinyHunters Oracle PeopleSoft Zero-Day Campaign2026-07-26
HighBreachRomania's ANCPI: Land Registry Database Destroyed by Bytetobreach2026-07-26
HighBreachAnatomic and Clinical Laboratory Associates: Unattributed Network Intrusion Exposes 169,626 Patient Records2026-07-26
HighBreachEyemart Express: February 2026 Intrusion Exposes Customer PII and Health Data2026-07-26
HighBreachIMCO: Cyber Support Front Claims 30TB Exfiltration From Israeli Armor Supplier2026-07-26
HighBreachFBI and DHS: Federal Workforce Doxing Campaign2026-07-26
HighRansomwareCarrier AB: Deadlock Ransomware Disrupts Swedish Logistics Operations2026-07-26
HighRansomwareStiftung Autismuslink: INC Ransom Data-Theft Attack2026-07-26
HighBreachU.S. County Government: Kairos Data Extortion2026-07-26
HighBreachU.S. County Government: Kairos Data Extortion Payment2026-07-26
HighBreachChabi: EV Charging Operator Confirms Breach of 298,333 Member Records2026-07-26
HighRansomwareU.S. Companies and a Private School: Ryuk Ransomware Operator Pleads Guilty2026-07-26
HighRansomwareVaud Fiduciary Firm: BravoX Ransomware Leak Exposes Municipal and Tax Data2026-07-25
CriticalCVE · KEVSiYuan Unauthenticated Administrator Takeover via Exposed MCP Endpoint (CVE-2026-66012)2026-07-25
HighRansomwareStryker: Qilin Ransomware Data-Leak Extortion2026-07-25
HighBreachU.S. County Government: Kairos Data Extortion Payout2026-07-25
HighRansomwareMetrabyte Cloud: APT73/Bashe Ransomware Extortion2026-07-25
HighRansomwareHighline Community College: Qilin Ransomware Extortion Claim2026-07-25
HighRansomwareInfoSync Services: Chaos Ransomware Data Extortion2026-07-25
HighRansomwareKean University: Qilin Ransomware Data Extortion2026-07-25
HighBreachDecathlon: Alleged Threat Actor Breach Exposing 160 Million Records2026-07-25
HighRansomwareOmnicell: Everest Ransomware 1TB Data Theft Claim2026-07-25
HighBreachGlobal Manufacturers: Cl0p Ransomware PLM Server Exploitation2026-07-25
CriticalCVE · KEVCritical Azure Portal Authorization Flaw Exposes Data Over the Network (CVE-2026-62835)2026-07-24
HighBreachRapidFort: xpl0itrs Claims 569GB CanisterWorm Breach2026-07-24
HighBreachSouth Korea Ministry of Foreign Affairs: Diplomatic Academy Breach Exposes Diplomats2026-07-24
HighBreachNPCIL/Kudankulam: World Leaks Ransomware Third-Party Breach2026-07-24
HighBreachBlaBlaCar: Threat Actor Claims 140M Record Breach2026-07-24
HighBreachThailand Ministry of Finance: China-Linked AI-Driven Espionage Intrusion2026-07-24
HighBreachFidelity Securities Investment Trust Taiwan: 2.15 Million Customer Records Exposed in Dark Web Leak2026-07-24
HighBreachKootenai County: Ransomware Data Theft Breach2026-07-24
CriticalCVE · KEVCVE-2026-65689: Unauthenticated Arbitrary File Read in Bold Reports Standalone Report Designer2026-07-23
CriticalCVE · KEVCVE-2026-58275: Critical Missing Authorization Flaw in Azure DNS2026-07-23
CriticalCVE · KEVCVE-2026-54120: Critical Code Execution Flaw in Microsoft Surface Management Services2026-07-23
CriticalCVE · KEVCVE-2026-62825: Critical Authentication Bypass in Azure Key Vault Enables Privilege Escalation2026-07-23
HighBreachDentaQuest: ShinyHunters Extortion Breach2026-07-23
CriticalCVE · KEVCVE-2024-58354: Repository Takeover in cal.com's GitHub Actions Workflows2026-07-23
CriticalCVE · KEVCVE-2026-50517: Critical Deserialization Flaw in Microsoft 365 Copilot Enables Remote Code Execution2026-07-23
CriticalCVE · KEVGoDAM WordPress Plugin Flaw (CVE-2026-14282) Allows Unauthenticated File Upload and Possible RCE2026-07-23
HighBreachUS Water and Energy Providers: Iranian State-Backed ICS Disruption2026-07-23
HighRansomwareFairlife: Anubis Ransomware Extortion2026-07-23
CriticalCVE · KEVCVE-2026-56165: Critical Remote Code Execution in Microsoft Account2026-07-23
CriticalCVECVE-2026-56191: Critical Authentication Flaw in Microsoft Exchange Online2026-07-23
CriticalCVE · KEVCVE-2026-15011: Critical Unauthenticated Code Injection in WordPress Customer Support Ticket System & Helpdesk2026-07-23
HighBreachVietnamese Hospital, Malaysian Foreign Ministry, Honduran Congress: JadeProx Espionage Campaign2026-07-23
CriticalCVE · KEVCVE-2026-15015: Unauthenticated Admin Takeover in MountDev AI MCP Connector for WordPress2026-07-23
CriticalCVE · KEVCVE-2026-65606: SiYuan XSS-to-RCE via siyuan:// Protocol Handler2026-07-23
CriticalCVE · KEVCVE-2026-56160: Critical Privilege Escalation in Azure Red Hat OpenShift2026-07-23
HighBreachMedtronic: ShinyHunters Data Breach2026-07-23
CriticalCVE · KEVCVE-2025-71389: Unauthenticated RCE in Cal.com (cal.diy) via Next.js RSC Deserialization2026-07-23
CriticalCVE · KEVCVE-2026-63732: Critical RCE Chain in 9router via Default Password2026-07-23
CriticalCVE · KEVCVE-2026-15981: Critical Authentication Bypass in WordPress SAML SSO Login Plugin2026-07-23
HighBreachChick-fil-A: Credential-Stuffing Attack on Loyalty Accounts2026-07-23
CriticalCVE · KEVh2oGPT Path Traversal in OpenAI-Compatible Files API (CVE-2026-65700)2026-07-23
CriticalCVE · KEVCVE-2026-65605: Stored XSS to RCE in SiYuan Attribute View2026-07-23
HighRansomwareNichirei: RansomHouse Ransomware Attack Disrupts Frozen Food Supply Chain2026-07-22
HighBreachNichirei: RansomHouse Ransomware Attack2026-07-22
HighBreachOrigin Energy: Unverified Actor Claims Breach of 2 Million Customer Records2026-07-22
CriticalCVE · KEVCVE-2026-60367: Critical Unauthenticated Takeover in Oracle Platform Security for Java2026-07-22
HighBreachChange Healthcare: ALPHV/BlackCat Ransomware Breach Hits 190 Million2026-07-22
CriticalCVE · KEVCVE-2026-60366: Critical Unauthenticated Takeover in Oracle Platform Security for Java2026-07-22
HighRansomwareCaterpillar Inc.: CoinbaseCartel Ransomware Extortion2026-07-22
CriticalCVE · KEVCVE-2026-60372: Critical Unauthenticated Takeover in Oracle Platform Security for Java2026-07-22
HighRansomwareNichirei: RansomHouse Ransomware Supply Chain Attack2026-07-22
CriticalCVE · KEVCVE-2026-16232: Check Point SmartConsole Authentication Bypass Grants Full Admin Access2026-07-22
HighRansomwareNichirei: RansomHouse Ransomware Attack2026-07-22
HighBreachUnion County, Ohio: Kairos Data-Theft Extortion2026-07-22
HighBreachRomania Land Registry (ANCPI): Stolen Credentials and Known Vulnerabilities2026-07-22
CriticalCVE · KEVCVE-2026-60369: Critical Scope-Changing Flaw in Oracle Platform Security for Java2026-07-22
CriticalCVE · KEVCritical SharePoint RCE: CVE-2026-50522 Under Active Exploitation2026-07-22
HighBreachNovo Nordisk: FulcrumSec Extortion and 1.3TB Data Leak2026-07-22
CriticalCVE · KEVCVE-2026-60376: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVCVE-2026-60329: Critical Unauthenticated Takeover in Oracle Identity Manager2026-07-21
CriticalCVEOracle Service Delivery Platform Hit by Critical CVE-2026-60381 (CVSS 9.9)2026-07-21
CriticalCVE · KEVCVE-2026-60441: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVOracle Commerce Guided Search Hit by Critical Takeover Flaw (CVE-2026-61146)2026-07-21
CriticalCVE · KEVCVE-2026-60264: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60306: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-0770: Unauthenticated Root RCE in Langflow via exec_globals2026-07-21
CriticalCVE · KEVOracle Unified Directory Takeover Flaw: CVE-2026-60361 (CVSS 9.9)2026-07-21
CriticalCVE · KEVCVE-2026-60456: Critical Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVCVE-2026-60360: Critical Unauthenticated Takeover in Oracle Unified Directory2026-07-21
CriticalCVE · KEVCVE-2026-60202: Critical Unauthenticated RCE in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVCVE-2026-65007: Grav API Plugin Missing Authorization Enables Account Takeover2026-07-21
CriticalCVE · KEVCVE-2026-60457: Critical Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVCVE-2026-60535: Critical Unauthenticated Takeover in Oracle Identity Manager Connector2026-07-21
CriticalCVE · KEVCVE-2026-63764: Critical SSRF in lmdeploy Lets Unauthenticated Attackers Reach Cloud Metadata2026-07-21
CriticalCVE · KEVCVE-2026-61201: Critical PeopleSoft CRM Flaw Allows Unauthenticated Takeover2026-07-21
CriticalCVE · KEVCVE-2026-60272: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60285: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60552: Critical Oracle WebCenter Sites Takeover Flaw2026-07-21
CriticalCVE · KEVCVE-2026-60292: Critical Unauthenticated Takeover in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVCVE-2026-60358: Critical Unauthenticated Takeover in Oracle Access Manager2026-07-21
CriticalCVE · KEVCVE-2026-60380: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVCVE-2026-60328: Critical Unauthenticated Takeover in Oracle Access Manager2026-07-21
CriticalCVE · KEVCVE-2026-35290: Critical Unauthenticated Takeover in Oracle Application Testing Suite2026-07-21
CriticalCVE · KEVCVE-2026-60377: Critical Oracle Service Delivery Platform Flaw Enables Full Compromise2026-07-21
CriticalCVE · KEVCVE-2026-60215: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60711: Critical Siebel CRM Cloud Applications Takeover Flaw (CVSS 9.9)2026-07-21
CriticalCVE · KEVCVE-2026-60267: Critical Unauthenticated Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60290: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVOracle Commerce Guided Search Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-61145)2026-07-21
HighRansomwareRumah Sakit Universitas Indonesia (RSUI): Nova Ransomware Attack2026-07-21
CriticalCVE · KEVCVE-2026-46982: Critical Unauthenticated Takeover Flaw in Oracle Retail Integration Bus2026-07-21
CriticalCVE · KEVCVE-2026-60442: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVCVE-2026-60217: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVOracle Service Delivery Platform Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-60375)2026-07-21
CriticalCVE · KEVCVE-2026-60248: Critical Oracle Coherence Takeover Flaw in Fusion Middleware2026-07-21
CriticalCVE · KEVCVE-2026-60537: Critical Takeover Flaw in Oracle Managed File Transfer2026-07-21
CriticalCVE · KEVOracle WebCenter Portal Hit by Critical CVE-2026-60568 (CVSS 9.9)2026-07-21
CriticalCVE · KEVCVE-2026-60200: Critical Unauthenticated Takeover Flaw in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVOracle Unified Directory Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-60362)2026-07-21
CriticalCVE · KEVCVE-2026-60287: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60547: Critical Takeover Flaw in Oracle Managed File Transfer2026-07-21
CriticalCVE · KEVCVE-2026-61203: Critical Unauthenticated Flaw in Oracle PeopleSoft FIN Expenses2026-07-21
CriticalCVE · KEVOracle WebCenter Content Critical Flaw: CVE-2026-606492026-07-21
CriticalCVE · KEVCVE-2026-60286: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60424: Critical Oracle Unified Directory Takeover Flaw via LDAP2026-07-21
CriticalCVE · KEVCVE-2026-61153: Critical Unauthenticated Flaw in Oracle Commerce Guided Search2026-07-21
CriticalCVE · KEVCVE-2026-46994: Critical Unauthenticated Takeover in Oracle Enterprise Manager2026-07-21
CriticalCVE · KEVCVE-2026-61041: Critical Takeover Flaw in Oracle Demantra Demand Management2026-07-21
CriticalCVE · KEVCVE-2026-60363: Critical Unauthenticated Takeover in Oracle HTTP Server2026-07-21
CriticalCVE · KEVCVE-2026-46983: Critical Unauthenticated Takeover in Oracle Retail Integration Bus2026-07-21
CriticalCVE · KEVCVE-2026-60249: Critical Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60374: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVCVE-2026-60216: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60168: Critical Unauthenticated Flaw in Oracle Hospitality Simphony POS2026-07-21
CriticalCVE · KEVOracle WebLogic Server Remote Takeover — CVE-2026-602912026-07-21
CriticalCVE · KEVCVE-2026-60137: WordPress Core SQL Injection Added to CISA KEV2026-07-21
CriticalCVE · KEVCVE-2026-60239: Critical Oracle Coherence Flaw Enables Low-Privilege Data Compromise2026-07-21
CriticalCVE · KEVCVE-2026-60551: Critical Unauthenticated Takeover Flaw in Oracle WebCenter Sites2026-07-21
CriticalCVE · KEVCVE-2026-13439: Unauthenticated Admin Takeover in Easy Form Builder for WordPress2026-07-21
CriticalCVE · KEVCVE-2026-60205: Critical Unauthenticated Takeover Flaw in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVCVE-2026-60532: Critical Unauthenticated Takeover in Oracle Identity Manager Connector2026-07-21
CriticalCVE · KEVCVE-2026-61178: Critical Unauthenticated Takeover in Oracle Agile PLM for Process2026-07-21
CriticalCVE · KEVOracle WebCenter Content Hit by Critical CVSS 9.9 Takeover Flaw (CVE-2026-60663)2026-07-21
CriticalCVE · KEVCVE-2026-60542: Critical Remote Takeover Flaw in Oracle Business Process Management Suite2026-07-21
HighRansomwareKettering Health: Interlock Ransomware Attack2026-07-21
CriticalCVE · KEVCVE-2026-60275: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVOracle WebCenter Sites Critical RCE: CVE-2026-61140 Allows Unauthenticated Takeover2026-07-21
CriticalCVE · KEVCVE-2026-60555: Critical Unauthenticated Takeover Flaw in Oracle WebCenter Sites2026-07-21
CriticalCVE · KEVCVE-2026-60300: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60262: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60212: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60387: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
HighBreachClover Health Investments: Social Engineering Breach of Employee Accounts2026-07-21
CriticalCVE · KEVCVE-2026-60447: Critical Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVCVE-2026-61130: Critical Unauthenticated Flaw in Oracle Commerce Platform2026-07-21
CriticalCVE · KEVCVE-2026-60386: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVCVE-2026-60524: Critical Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVOracle Commerce Platform Remote Takeover — CVE-2026-611312026-07-21
CriticalCVE · KEVCVE-2026-60446: Critical Unauthenticated Takeover in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVCVE-2026-60294: Critical Unauthenticated Takeover Flaw in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVOracle Data Integrator Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-60999)2026-07-21
CriticalCVE · KEVOracle Commerce Guided Search Hit by Critical Unauthenticated Data Compromise Flaw (CVE-2026-61156)2026-07-21
CriticalCVE · KEVCVE-2026-60274: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60204: Critical Unauthenticated Takeover Flaw in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVCVE-2026-60229: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60276: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-61154: Critical Unauthenticated Takeover in Oracle Commerce Guided Search2026-07-21
CriticalCVE · KEVCVE-2026-60541: Critical Unauthenticated Takeover Flaw in Oracle SOA Suite2026-07-21
CriticalCVE · KEVCVE-2026-46876: Critical Unauthenticated Takeover in Oracle Application Testing Suite2026-07-21
CriticalCVE · KEVCVE-2026-60531: Critical Oracle Identity Manager Connector Takeover Flaw2026-07-21
CriticalCVE · KEVOracle Coherence Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-60259)2026-07-21
CriticalCVE · KEVOracle WebLogic Server Proxy Plug-in Flaw (CVE-2026-60364)2026-07-21
CriticalCVE · KEVCVE-2026-60206: Critical SAML Flaw Enables Full Takeover of Oracle WebLogic Server2026-07-21
CriticalCVE · KEVOracle Service Delivery Platform Takeover — CVE-2026-603842026-07-21
CriticalCVE · KEVCVE-2026-63030: Critical WordPress Core Flaw Chains to Remote Code Execution2026-07-21
CriticalCVE · KEVCVE-2026-60198: Critical Unauthenticated RCE in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVOracle Coherence Core Flaw (CVE-2026-60296) Allows Unauthenticated Takeover2026-07-21
CriticalCVE · KEVSolarWinds Serv-U IDOR Flaw (CVE-2026-28308) Enables Remote Code Execution2026-07-21
CriticalCVE · KEVCVE-2026-60297: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60199: Critical Unauthenticated Takeover Flaw in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVCVE-2026-60302: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVSolarWinds Serv-U Broken Access Control Flaw Lets Domain Admins Escalate to System Admin (CVE-2026-28309)2026-07-21
CriticalCVE · KEVOracle WebCenter Content Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-60435)2026-07-21
CriticalCVE · KEVCVE-2026-60606: Critical Unauthenticated Flaw in Oracle PeopleSoft Common Application Objects2026-07-21
CriticalCVE · KEVCVE-2026-60445: Critical Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVCVE-2026-60385: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVCVE-2026-60210: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60365: Critical Unauthenticated Compromise in Oracle WebLogic Server Proxy Plug-in2026-07-21
CriticalCVE · KEVCVE-2026-60258: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60228: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVOracle Coherence Remote Takeover Flaw — CVE-2026-602802026-07-21
CriticalCVE · KEVCVE-2026-60773: Critical Flaw in Oracle E-Business Suite Application Object Library2026-07-21
CriticalCVE · KEVCVE-2026-61204: Critical PeopleSoft FIN Program Management Takeover Flaw2026-07-21
CriticalCVE · KEVCVE-2026-60540: Critical Oracle SOA Suite Flaw Allows Full Data Compromise2026-07-21
CriticalCVE · KEVCVE-2026-61155: Critical Unauthenticated Flaw in Oracle Commerce Guided Search2026-07-21
CriticalCVE · KEVCVE-2026-60422: Critical Oracle Unified Directory Flaw Enables Full Data Compromise via LDAP2026-07-21
CriticalCVE · KEVOracle PeopleSoft HCM Talent Acquisition Manager Critical Takeover Flaw (CVE-2026-61076)2026-07-21
CriticalCVE · KEVCVE-2026-60463: Critical Unauthenticated Takeover in Oracle WebCenter Content: Imaging2026-07-21
CriticalCVE · KEVCVE-2026-60269: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60236: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60219: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60246: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-46924: Critical Unauthenticated Takeover in Oracle Application Testing Suite2026-07-21
CriticalCVE · KEVCVE-2026-61059: Critical Unauthenticated Flaw in Oracle PeopleSoft SCM Order Management2026-07-21
CriticalCVE · KEVCVE-2026-60251: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60333: Critical Oracle Access Manager Takeover Flaw2026-07-21
CriticalCVE · KEVCVE-2026-61184: Critical Unauthenticated Flaw in Oracle Agile PLM for Process2026-07-21
CriticalCVE · KEVCVE-2026-47036: Critical Unauthenticated Takeover Flaw in Oracle Siebel CRM2026-07-21
CriticalCVE · KEVOracle WebCenter Portal Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-60566)2026-07-21
CriticalCVE · KEVCVE-2026-60221: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
HighBreachSuno: 55 Million User Records Stolen in Breach2026-07-21
CriticalCVE · KEVCVE-2026-60289: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-61097: Critical Flaw in Oracle Banking Trade Finance Process Management2026-07-21
CriticalCVE · KEVOracle Coherence Critical Flaw (CVE-2026-60288): Unauthenticated Takeover2026-07-21
CriticalCVE · KEVCVE-2026-60220: Critical Oracle Coherence Flaw Allows Unauthenticated Remote Compromise2026-07-21
CriticalCVE · KEVCVE-2026-60250: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60567: Critical Unauthenticated Flaw in Oracle Identity Manager2026-07-21
CriticalCVE · KEVOracle SOA Suite Flaw CVE-2026-60538: Unauthenticated Takeover, CVSS 9.82026-07-21
CriticalCVE · KEVCVE-2026-60880: Critical Unauthenticated Takeover in Oracle E-Business Suite Work in Process2026-07-21
CriticalCVE · KEVCVE-2026-60247: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVOracle Access Manager Authentication Bypass — CVE-2026-603552026-07-21
CriticalCVE · KEVCVE-2026-61167: Critical Unauthenticated Takeover in Oracle Agile PLM2026-07-21
CriticalCVE · KEVCVE-2026-60378: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVOracle Coherence Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-60308)2026-07-21
CriticalCVE · KEVCVE-2026-60460: Critical Unauthenticated Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
HighRansomwareStadler Rail: Supplier Platform Ransom Extortion2026-07-21
CriticalCVE · KEVOracle BI Publisher Critical Takeover Flaw — CVE-2026-601732026-07-21
CriticalCVE · KEVCVE-2026-60644: Critical Unauthenticated Takeover in Oracle WebCenter Content2026-07-21
CriticalCVE · KEVCVE-2026-28314: SolarWinds Serv-U Account Takeover via Insecure Direct Object Reference2026-07-21
CriticalCVE · KEVCVE-2026-61100: Critical Unauthenticated Takeover in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVCVE-2026-60458: Critical Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVCVE-2026-60565: Critical Oracle WebCenter Portal Takeover Flaw2026-07-21
CriticalCVE · KEVCVE-2026-65057: Unauthenticated SSRF in Keep Healthcheck Endpoint2026-07-21
CriticalCVE · KEVCVE-2026-65008: Critical Remote Code Execution in Grav CMS2026-07-21
CriticalCVE · KEVCVE-2026-61171: Critical Unauthenticated Flaw in Oracle Agile PLM2026-07-21
CriticalCVE · KEVOracle WebCenter Portal Critical Flaw: CVE-2026-60564 (CVSS 9.6)2026-07-21
CriticalCVE · KEVCVE-2026-60459: Critical Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
CriticalCVE · KEVCVE-2026-61186: Critical Unauthenticated Flaw in Oracle Agile Engineering Data Management2026-07-21
CriticalCVE · KEVCVE-2026-60253: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2021-27137: DD-WRT UPnP Buffer Overflow Under Active Exploitation2026-07-21
CriticalCVE · KEVCVE-2026-60429: Critical Oracle Unified Directory Takeover Flaw2026-07-21
CriticalCVE · KEVOracle Coherence Core Flaw (CVE-2026-60234): Unauthenticated Takeover, CVSS 9.82026-07-21
CriticalCVE · KEVCVE-2026-28302: SolarWinds Serv-U IDOR Enables Root-Level RCE2026-07-21
CriticalCVE · KEVCVE-2026-60461: Critical Takeover Flaw in Oracle WebCenter Enterprise Capture2026-07-21
HighBreachEstée Lauder: Cl0p Oracle EBS Zero-Day Breach2026-07-21
CriticalCVE · KEVCVE-2026-60326: Critical Unauthenticated Bypass in Oracle Access Manager2026-07-21
CriticalCVE · KEVCVE-2026-60244: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVOracle Service Delivery Platform Hit by Maximum-Severity SOAP Takeover Flaw (CVE-2026-60379)2026-07-21
CriticalCVE · KEVCVE-2026-47040: Critical Unauthenticated Flaw in Oracle Net Services2026-07-21
CriticalCVE · KEVOracle Coherence Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-60227)2026-07-21
CriticalCVE · KEVOracle Coherence Hit by Critical CVE-2026-60278 (CVSS 9.8)2026-07-21
CriticalCVE · KEVCVE-2026-60257: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60208: Critical Unauthenticated RCE-Class Flaw in Oracle WebLogic Server2026-07-21
CriticalCVE · KEVCVE-2026-60631: Critical Unauthenticated Flaw in Oracle WebCenter Content2026-07-21
CriticalCVE · KEVCVE-2026-61175: Critical Unauthenticated Flaw in Oracle Product Lifecycle Analytics2026-07-21
CriticalCVE · KEVCVE-2026-60402: Critical Takeover Flaw in Oracle TimesTen In-Memory Database2026-07-21
CriticalCVE · KEVOracle Coherence Core Flaw (CVE-2026-60240): Unauthenticated Takeover, CVSS 9.82026-07-21
CriticalCVE · KEVSolarWinds Serv-U Privilege Escalation Flaw Rated Critical (CVE-2026-28306)2026-07-21
CriticalCVE · KEVCVE-2026-60298: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60230: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-28307: Critical Privilege Escalation in SolarWinds Serv-U2026-07-21
CriticalCVE · KEVCVE-2026-47056: Critical Unauthenticated Takeover in Oracle Data Integrator2026-07-21
CriticalCVE · KEVOracle Coherence Core Flaw (CVE-2026-60197): Unauthenticated Takeover, CVSS 9.82026-07-21
CriticalCVE · KEVCVE-2026-60299: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVOracle Coherence Core Flaw (CVE-2026-60241): Unauthenticated Takeover, CVSS 9.82026-07-21
CriticalCVE · KEVCVE-2026-60627: Critical JD Edwards EnterpriseOne Tools Takeover Flaw2026-07-21
CriticalCVE · KEVCVE-2026-60209: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60256: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60561: Critical Scope-Changing Takeover Flaw in Oracle WebCenter Portal2026-07-21
CriticalCVE · KEVCVE-2026-61174: Critical Flaw in Oracle Product Lifecycle Analytics2026-07-21
CriticalCVE · KEVCVE-2026-61183: Critical Unauthenticated Takeover in Oracle Agile PLM for Process2026-07-21
CriticalCVE · KEVSolarWinds Serv-U Privilege Escalation Flaw (CVE-2026-28310) Rated Critical2026-07-21
CriticalCVE · KEVCVE-2026-60279: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60226: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60632: Critical Unauthenticated Flaw in Oracle WebCenter Content2026-07-21
CriticalCVE · KEVCVE-2026-61129: Critical Unauthenticated Takeover in Oracle Commerce Platform2026-07-21
CriticalCVE · KEVCVE-2026-60254: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60224: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-28312: Critical Privilege Escalation in SolarWinds Serv-U2026-07-21
CriticalCVE · KEVCVE-2026-28305: Critical IDOR in SolarWinds Serv-U Leads to Root RCE2026-07-21
CriticalCVE · KEVOracle Commerce Guided Search Hit by Critical Unauthenticated Takeover Flaw (CVE-2026-61161)2026-07-21
CriticalCVE · KEVCVE-2026-61196: Critical Unauthenticated Takeover in Oracle Identity Manager2026-07-21
CriticalCVE · KEVCVE-2026-46989: Critical Flaw in Oracle Enterprise Manager Base Platform2026-07-21
CriticalCVE · KEVCVE-2026-60389: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVCVE-2026-60719: Critical Oracle BI Publisher Flaw Enables Full Data Compromise2026-07-21
CriticalCVE · KEVOracle Identity Manager Hit by Critical Unauthenticated Compromise Flaw (CVE-2026-61197)2026-07-21
CriticalCVE · KEVCVE-2026-60242: Critical Unauthenticated Takeover in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-60388: Critical Unauthenticated Takeover in Oracle Service Delivery Platform2026-07-21
CriticalCVE · KEVOracle Coherence Hit by Critical CVE-2026-60232: Unauthenticated Takeover2026-07-21
CriticalCVE · KEVCVE-2026-60438: Critical Unauthenticated Flaw in Oracle HTTP Server mod_ssl2026-07-21
CriticalCVE · KEVCVE-2026-61072: Critical Takeover Flaw in Oracle PeopleSoft FIN Staffing Front Office Brazil2026-07-21
CriticalCVE · KEVCVE-2026-60225: Critical Unauthenticated Takeover Flaw in Oracle Coherence2026-07-21
CriticalCVE · KEVCVE-2026-61065: Critical Unauthenticated Takeover in Oracle Access Manager2026-07-21
CriticalCVE · KEVCVE-2026-28313: Critical IDOR in SolarWinds Serv-U Enables Account Takeover2026-07-21
CriticalCVE · KEVCVE-2016-20096: Unauthenticated SQL Injection in Linknat VOS3000 and VOS20092026-07-21
CriticalCVE · KEVOracle WebCenter Portal Hit by Critical CVE-2026-60562 (CVSS 9.9)2026-07-21
CriticalCVE · KEVCVE-2026-64620: Critical Pre-Auth Heap Overflow in FreeRDP RSA Crypto2026-07-20
HighBreachRockstar Games: ShinyHunters Leaks Analytics via Anodot Integration2026-07-20
HighBreachHugging Face: First Confirmed End-to-End Agentic AI Breach2026-07-20
CriticalCVE · KEVCVE-2026-63766: Unauthenticated Command Injection in GPT-SoVITS WebUI2026-07-20
CriticalCVE · KEVCVE-2026-63767: Unauthenticated Pickle Deserialization RCE in ktransformers2026-07-20
HighRansomwareSalina Supply: Qilin Ransomware Data Extortion2026-07-20
HighBreachKorea National Diplomatic Academy: Nine-Month State-Level Intrusion2026-07-20
HighRansomwareReatile Group: Incransom Ransomware Data Extortion2026-07-20
CriticalCVE · KEVCVE-2026-64625: Critical OS Command Injection in AVideo Live Plugin2026-07-20
HighBreachCraneware: Customer and Staff Data Stolen in Cyber Attack2026-07-20
HighBreachPaidwork: 23 Million User Records Exposed in March Intrusion2026-07-20
HighBreachCarnival Corporation: Social Engineering Breach Exposes 6 Million Travelers2026-07-19
HighRansomwareBarts Health NHS Trust: Clop Ransomware Data Breach2026-07-19
HighBreachOhio Living: Senior Care Network Data Breach Exposing Personal and Medical Records2026-07-19
HighBreachAbbott Laboratories: ShinyHunters Breach and Dual Cyber Incidents2026-07-19
HighBreachBandai Namco: Teen ChatGPT-Assisted Account Cancellation Attack2026-07-19
HighRansomwareGovernment of Bermuda: Ransomware Attack With Suspected Ransom Payment2026-07-19
HighBreachFrench Government Tchap: Threat Actor Claims Mass Data Access2026-07-18
HighRansomwareDanone: Qilin Ransomware Data Leak2026-07-18
HighRansomwareKenya State House: Website Defacement and Bitcoin Extortion2026-07-18
HighBreachCoupang: Insider-Linked Breach Exposing 34 Million Customers2026-07-18
HighBreachEcopetrol: Cyberattack and Data Theft From 3,300 Accounts2026-07-18
HighRansomwareReliance Infrastructure: Ransomware Breach Exposes Kudankulam Nuclear Files2026-07-18
HighRansomwareDeutsche Bank: Unsafe Ransomware Third-Party Breach Claim2026-07-18
HighBreachYouLend: Unauthorized Network Intrusion Exposes Social Security Numbers2026-07-18
HighBreachPartnered Health: Malicious Actor Breaches GP Clinic Network2026-07-17
CriticalCVE · KEVCVE-2026-9103: Unauthenticated Superuser Access in IBM Langflow OSS2026-07-17
CriticalCVE · KEVCVE-2026-8859: Critical Path Traversal in IBM Langflow OSS Enables Arbitrary File Writes2026-07-17
HighBreachU.S. Voter Registration Databases: China State Sponsored Data Breach2026-07-17
CriticalCVE · KEVIBM Langflow OSS Code-Execution Flaw (CVE-2026-8481) Enables Authenticated RCE2026-07-17
CriticalCVE · KEVCVE-2026-8476: Critical Unsafe Deserialization RCE in IBM Langflow OSS2026-07-17
CriticalCVE · KEVCVE-2026-8635: Critical Privilege Escalation and Command Execution in IBM Langflow OSS2026-07-17
HighRansomwareCoca-Cola Fairlife: Ransomware Attack Halts US Dairy Production2026-07-17
CriticalCVE · KEVIBM Langflow OSS Ships Hard-Coded Credentials in CVE-2026-134462026-07-17
HighBreachErnst & Young: Third-Party Platform Breach Exposes Client Tax Data2026-07-17
CriticalCVE · KEVCVE-2026-8297: Critical SQL Injection in GisLab Laboratory Management System2026-07-17
CriticalCVE · KEVCVE-2026-15091: Critical Cross-Site Scripting Flaw in IBM Engineering AI Hub2026-07-17
CriticalCVE · KEVCVE-2026-9135: Critical Code Injection in IBM Langflow OSS ToolGuard2026-07-17
CriticalCVE · KEVCVE-2026-12692: Critical Authentication Bypass in Vimesoft Enterprise Video Platform2026-07-17
CriticalCVE · KEVFortinet FortiSandbox Hit by Critical Unauthenticated Command Injection (CVE-2026-39808)2026-07-16
CriticalCVE · KEVWireGuard Easy Weak Token Flaw Exposes VPN Peer Credentials (CVE-2026-63089)2026-07-16
CriticalCVE · KEVCVE-2023-49899: Unauthenticated Remote Command Execution in X-Rite MA-T62026-07-16
CriticalCVE · KEVCVE-2026-63087: Unauthenticated Token Hijack in Grafana OnCall2026-07-16
CriticalCVE · KEVCVE-2026-25089: Critical Unauthenticated Command Injection in Fortinet FortiSandbox2026-07-16
CriticalCVE · KEVCVE-2023-49900: Unauthenticated RCE in X-Rite MA-T6 Spectrophotometers2026-07-16
HighBreachRomania ANCPI: ByteToBreach Ransomware and Data Theft2026-07-16
CriticalCVE · KEVCVE-2026-58644: Critical SharePoint Deserialization Flaw Under Active Exploitation2026-07-16
HighBreachQantas: Tech Support Scam Contact Center Breach2026-07-16
HighBreachTRICARE: Military Health Data Breach Exposes DoD Benefits and Social Security Numbers2026-07-16
HighBreachPartnered Health: Medical Data Breach Across 21 GP Clinics2026-07-16
HighBreachGoose Creek: 6.6 Million Shopper Records Exposed via Shopify2026-07-16
HighBreachKudankulam Nuclear Power Plant: Critical Infrastructure Data Breach2026-07-15
CriticalCVE · KEVCVE-2026-46817: Critical Oracle E-Business Suite Flaw Enables Full Takeover of Oracle Payments2026-07-15
CriticalCVE · KEVCVE-2023-4346: KNX Account Lockout Flaw Lets Attackers Brick Building Automation Devices2026-07-15
HighRansomwareTKMS/Atlas Elektronik: The Gentlemen Ransomware Breach2026-07-15
HighRansomwareSpectrum Chemical: Chaos Ransomware Final Ultimatum2026-07-15
HighRansomwareExact Sciences: ShinyHunters Ransomware Extortion2026-07-15
HighBreachSecureholiday: Data Breach Feeding a Targeted Phishing Campaign2026-07-15
HighBreachPartnered Health: Patient Data Stolen in GP Network Breach2026-07-15
CriticalCVE · KEVCVE-2026-48327: Critical ColdFusion Authorization Flaw Enables Remote Code Execution2026-07-14
CriticalCVE · KEVCVE-2026-15409: Critical Unauthenticated SSRF in SonicWall SMA1000 Appliances2026-07-14
CriticalCVE · KEVCVE-2026-48356: Critical File Upload Flaw in Adobe Commerce and Magento Enables Code Execution2026-07-14
HighBreachNissan Americas: ShinyHunters PeopleSoft Zero-Day Breach2026-07-14
CriticalCVE · KEVAdobe ColdFusion SQL Injection Flaw Enables Arbitrary Code Execution (CVE-2026-48324)2026-07-14
CriticalCVE · KEVCVE-2026-48325: Critical Missing-Authentication Flaw in Adobe ColdFusion Enables Remote Code Execution2026-07-14
CriticalCVE · KEVCVE-2026-49798: Critical Use-After-Free Elevation of Privilege in Windows Kernel2026-07-14
CriticalCVE · KEVAdobe ColdFusion Path Traversal Flaw Enables Remote Code Execution (CVE-2026-48319)2026-07-14
CriticalCVE · KEVCVE-2026-48321: Critical Authorization Flaw in Adobe ColdFusion Enables Privilege Escalation2026-07-14
CriticalCVE · KEVCVE-2026-55008: Critical Cross-Site Scripting Flaw in Microsoft Exchange Server2026-07-14
HighBreachInter-Con Security Systems: ShinyHunters Data Breach2026-07-14
CriticalCVE · KEVCVE-2026-15701: Critical Remote Buffer Overflow in Totolink NR1800X Routers2026-07-14
CriticalCVE · KEVAdobe ColdFusion Path Traversal Flaw (CVE-2026-48318) Rated Critical at CVSS 9.92026-07-14
HighBreachTriWest Healthcare Alliance: Unauthorized Access Breach of Tricare Beneficiary Data2026-07-14
HighRansomwareMomenta: DragonForce Ransomware Breach and Alleged Financial Coverup2026-07-14
CriticalCVE · KEVCVE-2026-48322: Critical Code Injection Flaw in Adobe ColdFusion2026-07-14
CriticalCVE · KEVCVE-2026-56451: Critical JWT Authentication Bypass in Siemens Opcenter X2026-07-14
CriticalCVE · KEVCVE-2026-48561: Critical Command Injection in Microsoft 365 Copilot Mobile Apps2026-07-14
CriticalCVE · KEVCVE-2026-48334: Critical Code Execution Flaw in Adobe Illustrator2026-07-14
HighBreachMatch Group: ShinyHunters Extortion Breach2026-07-14
CriticalCVE · KEVCVE-2026-56164: Unauthenticated Privilege Escalation in Microsoft SharePoint Server2026-07-14
CriticalCVE · KEVCVE-2026-48359: Critical XXE Flaw in Adobe Experience Manager Could Enable Code Execution2026-07-14
CriticalCVE · KEVCVE-2026-48284: Critical ColdFusion Code Execution Flaw2026-07-14
CriticalCVE · KEVCVE-2026-56190: Critical Unauthenticated RDP Remote Code Execution in Windows2026-07-14
CriticalCVE · KEVCVE-2026-48358: Critical Code Execution Flaw in Adobe Commerce and Magento2026-07-14
CriticalCVE · KEVCVE-2026-15410: SonicWall SMA1000 Code Injection Under Active Exploitation2026-07-14
HighBreachLY Corporation: 7.1 Million LINE Game Users Exposed via Ad Tracker Misconfiguration2026-07-14
CriticalCVE · KEVCVE-2026-48259: Critical SSRF in Adobe Experience Manager Enables Code Execution2026-07-14
CriticalCVE · KEVCVE-2026-50518: Critical Unauthenticated RCE in Windows DHCP Server2026-07-14
HighRansomwareL'azurde: Blacknevas Ransomware Data Theft2026-07-14
HighRansomwareIronmark: Akira Ransomware Data Extortion2026-07-14
CriticalCVE · KEVCVE-2026-54990: Critical Remote Code Execution in Windows Remote Desktop Client2026-07-14
HighRansomwareAphena Pharma Solutions: Chaos Ransomware Data Theft Claim2026-07-14
CriticalCVE · KEVCVE-2026-50380: Critical Windows GDI+ Heap Overflow Enables Remote Code Execution2026-07-14
HighBreachAdobe: Raccoon Supply Chain Breach via BPO Vendor2026-07-13
CriticalCVE · KEVCVE-2026-4769: Unauthenticated Boot-Time Backdoor in WAGO System I/O Field Devices2026-07-13
CriticalCVE · KEVCVE-2026-61498: Unauthenticated Root Command Injection in Vitec Flamingo 4.12.22026-07-13
CriticalCVE · KEVCVE-2026-44747: Critical Memory Corruption in SAP NetWeaver Application Server ABAP2026-07-13
HighBreachCISA: Contractor Leaked AWS GovCloud Credentials on GitHub2026-07-13
CriticalCVE · KEVCisco IOS CSRF Flaw (CVE-2008-4128) Added to CISA KEV After Active Exploitation2026-07-13
HighRansomwareSynopsys: D1R Ransomware Data Breach2026-07-13
HighRansomwareARM: D1R Ransomware Breach and Data Leak2026-07-13
CriticalCVE · KEVCVE-2026-59801: Unauthenticated Provider API Exposure in 9Router2026-07-13
HighBreachCenters Laboratory: WorldLeaks Data Theft and Extortion2026-07-13
CriticalCVE · KEVSAP Approuter HTTP Request Smuggling — CVE-2026-276902026-07-13
HighBreachNintendo of America: ShadowByt3$ Third-Party Extortion Breach2026-07-13
CriticalCVE · KEVCVE-2026-44761: SAP Commerce Cloud Ships With Publicly Documented OAuth2 Credentials2026-07-13
CriticalCVE · KEVCVE-2026-61500: Predictable Signing Key Enables Admin Session Forgery in Rejetto HFS2026-07-13
HighBreachLidl: Third-Party Supplier Breach Exposes Customer Bank Details2026-07-13
HighBreachOdido: ShinyHunters Phishing Breach2026-07-13
HighBreachTata Electronics: World Leaks Ransomware Supply Chain Breach2026-07-13
HighBreachUnder Armour: 72 Million Customer Records Surface in Alleged Data Leak2026-07-13
CriticalCVE · KEVCVE-2026-62327: Unauthenticated API Key Exposure in 9Router2026-07-13
HighRansomwareBosch: D1R Ransomware Supply Chain Extortion2026-07-13
CriticalCVE · KEVCVE-2026-15300: Critical SQL Injection in GEO my WP WordPress Plugin2026-07-10
CriticalCVE · KEVCVE-2026-15282: Critical Unauthenticated File Upload in WordPress Instant Appointment Plugin2026-07-10
CriticalCVE · KEVCVE-2026-14894: Unauthenticated File Upload to RCE in Super Forms for WordPress2026-07-10
CriticalCVE · KEVCVE-2026-15378: Critical Blind SSRF in Red Hat OpenShift AI Guardrails2026-07-10
CriticalCVE · KEVHermes WebUI Unauthenticated RCE — CVE-2026-581232026-07-09
CriticalCVE · KEVCVE-2026-58122: Authentication Bypass in Hermes WebUI via X-Forwarded-For Spoofing2026-07-09
HighBreachAssuranceAmerica: Insurance Breach Exposes 6.9 Million Driver's License Records2026-07-09
CriticalCVE · KEVCVE-2026-2342: Critical Stored XSS in OceanicSoft ValeApp2026-07-09
HighBreachCRIM Puerto Rico: Exposed Property Map Leaks 1 Million Social Security Numbers2026-07-09
CriticalCVE · KEVCVE-2026-5955: Critical SQL Injection in BiEticaret E-Commerce Platform2026-07-09
HighBreachConduent: SafePay Ransomware Breach Exposes 62 Million2026-07-09
CriticalCVE · KEVCVE-2026-15158: Unauthenticated RCE in Blocksy Companion Pro for WordPress2026-07-09
HighBreachNayax: The Syndicate Claims Billion Record Card Breach2026-07-09
HighBreachKDDI: Third-Party Software Exploit Exposes 12 Million ISP Email Accounts2026-07-08
HighBreachAccenture: Threat Actor Claims 35GB Source Code and Credential Theft2026-07-08
HighBreachiRhythm: Social Engineering Breach of Third-Party Business Apps2026-07-08
HighRansomwareMount Royal University: June Ransomware Attack and Data Theft2026-07-08
CriticalCVE · KEVCVE-2026-47646: Critical XSS in Microsoft Dynamics 365 Customer Voice2026-07-08
HighBreachKDDI: Third-Party Vulnerability Exposes 12.2 Million ISP Email Accounts2026-07-08
HighRansomwareUnion County, Ohio: Kairos Data Extortion2026-07-08
CriticalCVE · KEVCVE-2026-9701: Insecure Password Reset in WordPress Eventer Plugin Enables Account Takeover2026-07-08
CriticalCVE · KEVCVE-2026-14487: Unauthenticated Arbitrary File Deletion in WordPress Simple Coherent Form Plugin2026-07-08
CriticalCVE · KEVCVE-2026-8307: Critical SQL Injection in Webbeyaz Mediküm Web2026-07-08
CriticalCVE · KEVCVE-2026-58480: Unauthenticated RCE in Blocksy Companion Pro for WordPress2026-07-08
CriticalCVE · KEVCVE-2026-12153: Unauthenticated Plugin Installation Flaw in WP Learn Manager2026-07-08
CriticalCVE · KEVJoomlack Page Builder CK: Unauthenticated File Upload Enables Full RCE (CVE-2026-56290)2026-07-07
HighBreachKDDI: Third-Party Software Exploit Exposes 12.2 Million ISP Emails2026-07-07
HighRansomwareUnion County, Ohio: Kairos Encryption-Less Ransomware Extortion2026-07-07
CriticalCVE · KEVCVE-2026-59706: Unauthenticated Config Endpoints Leak API Keys and Enable SSRF in mem02026-07-07
CriticalCVECVE-2026-59705: Unauthenticated Access in mem0 OpenMemory API2026-07-07
CriticalCVE · KEVCVE-2026-58473: Unauthenticated LLM Config Overwrite in Cognee Exposes All User Data2026-07-07
CriticalCVE · KEVCVE-2026-55255: Langflow IDOR Lets Authenticated Users Run Other Users' Flows2026-07-07
HighRansomwareExcel Cell Electronic: TheGentlemen Ransomware Attack2026-07-07
CriticalCVE · KEVCVE-2026-48282: Critical ColdFusion Path Traversal Under Active Exploitation2026-07-07
CriticalCVE · KEVCVE-2026-48908: Critical Unauthenticated File Upload in JoomShaper SP Page Builder2026-07-07
HighBreachCouncil of Europe: ShinyHunters Data Leak2026-07-07
CriticalCVE · KEVWPFunnels RCE: Unauthenticated Code Execution via Poisoned Log File (CVE-2026-14345)2026-07-07
CriticalCVE · KEVCVE-2026-14808: Credential Exposure in PROG MIS Prog Management System2026-07-06
HighRansomwareUnion County, Ohio: Kairos Encryption-Less Data Extortion2026-07-06
HighRansomwareLogiquip: TheGentlemen Ransomware Data Extortion2026-07-06
CriticalCVE · KEVCVE-2026-14807: Hard-Coded Credentials in PROG MIS ERP App Expose Database Access2026-07-06
HighBreachMedtronic: ShinyHunters Breach Exposes 3.8 Million2026-07-06
HighBreachMedtronic: ShinyHunters Data Breach2026-07-06
HighBreachUnion County, Ohio: Kairos Data Extortion2026-07-05
HighRansomwareSysco: Qilin Ransomware and ShinyHunters OAuth Extortion2026-07-05
HighBreachUK Government: Russian State Hackers Exploit FortiBleed2026-07-05
HighBreachMoody Bible Institute: ShinyHunters Extortion Breach2026-07-04
HighRansomwareCity of Acworth, Georgia: Incransom Ransomware Data Breach2026-07-04
HighBreachAdaptHealth: Contractor Compromise and Health Data Theft2026-07-04
HighRansomwareNovo Nordisk: FulcrumSec Extortion Breach2026-07-04
HighBreachOne Medical: ShinyHunters Extortion Breach2026-07-04
HighRansomwareCity of Oak Park, Michigan: Incransom Ransomware Attack2026-07-04
HighBreachU.S. Government Entity: Kairos Data-Theft Extortion2026-07-04
HighRansomwareIndra Group: The Gentlemen Ransomware2026-07-03
CriticalCVE · KEVCVE-2026-14544: Critical HPLIP Integer Overflow Enables Remote Code Execution2026-07-03
CriticalCVE · KEVCVE-2026-4321: Critical SQL Injection in Raera's Unsupported "Destekz" Product2026-07-03
CriticalCVE · KEVPrintcart WooCommerce Plugin Hit by Critical Unauthenticated File Deletion Flaw (CVE-2026-9725)2026-07-03
HighBreachShun Hing Group: Ransomware Data Breach2026-07-03
HighBreachSingapore Land Authority: 70,000 Records Exposed via Compromised IBM Test Environment2026-07-03
HighRansomwareFortiGate Users: FortiBleed Credential Harvesting Feeding INC and Lynx Ransomware2026-07-03
CriticalCVE · KEVMicrosoft Edge Type Confusion Flaw (CVE-2026-58289) Rated Critical at CVSS 9.02026-07-03
HighBreachDentaQuest: Confirmed Data Breach Exposing 2.6 Million Dental Accounts2026-07-02
CriticalCVE · KEVCVE-2026-59099: AES-GCM Nonce Reuse in Apereo CAS Leaks Login Session State2026-07-02
CriticalCVE · KEVCVE-2026-58455: Unauthenticated Command Injection in Notifiarr Dockwatch2026-07-02
HighBreachLakelands Public Health: Data Breach Exposes 60,000 Residents2026-07-02
CriticalCVE · KEVCVE-2026-45499: Critical SSRF in Azure OpenAI Enables Privilege Escalation2026-07-02
CriticalCVE · KEVCVE-2026-58466: Hard-Coded Default Admin Credentials in AutoBangumi2026-07-02
CriticalCVE · KEVCVE-2026-57100: Critical SSRF in Microsoft Entra Provisioning Service2026-07-02
HighRansomwareRiver Bank & Trust: Ransomware Breach by Unauthorized Threat Actor2026-07-02
CriticalCVE · KEVCVE-2026-5524: Critical Unauthenticated RCE in Divi Form Builder for WordPress2026-07-02
CriticalCVE · KEVCVE-2026-41106: Critical Open Redirect in Microsoft 365 Copilot2026-07-02
HighBreachMiddletown, Ohio: SafePay Ransomware Breach2026-07-02
HighRansomwareDyStar: Settra Ransomware Data Theft Claim2026-07-01
CriticalCVE · KEVCVE-2026-34099: Unauthenticated SQL Injection in Guardian language-system2026-07-01
CriticalCVE · KEVCVE-2026-58453: Hard-Coded Credentials in JAIOTlink C492A-W6 Wi-Fi IP Cameras2026-07-01
HighRansomwareFluke Corporation: ShinyHunters Ransomware Extortion2026-07-01
CriticalCVE · KEVCVE-2026-58457: Unauthenticated Root Command Injection in Shenzhen Aitemi M300 Wi-Fi Repeater2026-07-01
CriticalCVE · KEVCVE-2026-34108: Unauthenticated OS Command Injection in Guardian language-system2026-07-01
HighRansomwareFord de Mexico: Krybit Ransomware Extortion2026-07-01
HighBreachNYC Health + Hospitals: Biometric Data Breach Exposing 1.8 Million People2026-07-01
HighBreachSapporo and KDDI: Wave of Japanese Corporate Breaches2026-07-01
CriticalCVE · KEVCVE-2026-34100: Critical SQL Injection in Guardian language-system2026-07-01
HighRansomwareMusashino University: Qilin Ransomware Attack2026-07-01
HighBreachDHS: Homeland Security Information Network Breach2026-07-01
CriticalCVE · KEVCVE-2026-34114: Unauthenticated OS Command Injection in Guardian language-system2026-07-01
CriticalCVE · KEVCVE-2026-34106: Unauthenticated OS Command Injection in Guardian language-system2026-07-01
CriticalCVE · KEVCVE-2026-34105: Critical SQL Injection in Guardian language-system2026-07-01
CriticalCVE · KEVMicrosoft SharePoint Server Deserialization Flaw (CVE-2026-45659) Added to CISA KEV2026-07-01
CriticalCVE · KEVIBM Langflow OSS Exposes All Stored Credentials via Weak Encryption Key Derivation (CVE-2026-7874)2026-06-30
HighBreachAssuranceAmerica: Third-Party Breach via Targeted Employee Compromise2026-06-30
CriticalCVE · KEVCVE-2026-11708: Critical Cross-Site Scripting Flaw in IBM WebSphere Application Server2026-06-30
CriticalCVE · KEVCVE-2026-12073: Critical Account Takeover in WordPress ProfileGrid Plugin2026-06-30
HighRansomwarePakistan CDA: Ransomware Strike on Islamabad Billing System2026-06-30
HighRansomwareHMC Farms: Settra Ransomware Extortion2026-06-30
CriticalCVE · KEVCVE-2026-7803: Critical Code Execution Flaw in IBM Langflow OSS2026-06-30
CriticalCVE · KEVCVE-2026-7873: Critical Command Injection in IBM Langflow OSS2026-06-30
CriticalCVE · KEVCVE-2026-7871: Critical Deserialization Flaw Enables Remote Code Execution in IBM Langflow OSS2026-06-30
CriticalCVE · KEVCVE-2026-56700: Critical Multiple Code-Execution Flaws in Grav CMS2026-06-30
HighBreachNotion: Threat Actor Claims 110M Record Breach2026-06-30
HighBreachTexas Parks & Wildlife: Third-Party Vendor Breach Exposes 3 Million Hunters and Anglers2026-06-30
CriticalCVE · KEVCVE-2026-48286: Critical Authorization Flaw in Adobe Campaign Classic Enables Remote Code Execution2026-06-30
CriticalCVE · KEVCVE-2026-58449: Unauthenticated RCE in txtai API /reindex Endpoint2026-06-30
HighRansomwareDC Housing Authority: Ransomware Attack With Data Theft Claim2026-06-30
CriticalCVE · KEVIBM Langflow OSS Hit by Critical CVE-2026-10134: Full Compromise via Code Injection2026-06-30
CriticalCVE · KEVIBM WebSphere Application Server Hit by Critical XSS Flaw (CVE-2026-11712)2026-06-30
HighRansomwareNidec Corporation: Blackfield Ransomware $2M Extortion2026-06-30
CriticalCVE · KEVCVE-2026-48276: Critical Unauthenticated Code Execution in Adobe ColdFusion2026-06-30
CriticalCVE · KEVIBM Db2 Pre-Auth RCE (CVE-2026-10109): Critical DRDA Handshake Flaw2026-06-30
CriticalCVE · KEVOcelot API Gateway IP Allow/Block List Bypass via WebSocket Upgrade (CVE-2026-58172)2026-06-30
HighBreachNAIC: ShinyHunters Oracle PeopleSoft Zero-Day Breach2026-06-30
CriticalCVE · KEVIBM Langflow OSS Cross-Tenant Credential Reuse (CVE-2026-10140)2026-06-30
CriticalCVE · KEVAdobe ColdFusion CVE-2026-48277: Critical CVSS 10.0 Remote Code Execution2026-06-30
CriticalCVE · KEVCVE-2026-58116: Critical RCE in LLaMA-Factory via Malicious Model Path2026-06-30
HighBreachAflac Japan: Policyholder Portal Breach Exposes 4.38 Million Customers2026-06-30
CriticalCVE · KEVCVE-2026-58166: Unauthenticated Path Traversal in OpenBMB ChatDev Upload Handler2026-06-30
CriticalCVE · KEVCVE-2026-56278: Hardcoded Default Session Secret in Flowise Enables Authentication Bypass2026-06-30
CriticalCVE · KEVOrkes Conductor Unauthenticated RCE: CVE-2026-581382026-06-30
HighBreachLogitech: Clop Extortion via Oracle Zero-Day2026-06-29
HighBreachTowerpoint Wealth: Unauthorized Actor Exfiltrates Client Financial Data2026-06-29
HighBreachNissan: Oracle E-Business Suite Zero-Day Data Breach2026-06-29
HighRansomwareHologic: Redact Ransomware Data Extortion2026-06-29
HighBreachEuropean Commission: Cloud Data Breach Confirmed2026-06-29
CriticalCVE · KEVSimpleHelp OIDC Authentication Bypass (CVE-2026-48558) Lands on CISA's KEV List2026-06-29
HighBreachSouthern Illinois Ob-Gyn Associates: Network Intrusion Exposes 38,700 Patients2026-06-29
HighBreachDETRAN SP: pl4t0v Free Database Leak of 13 Million Records2026-06-29
HighBreachLexisNexis: FulcrumSec Exfiltrates 2GB From AWS Infrastructure2026-06-29
HighRansomwareShwapno: Ransom-Driven Breach of Bangladesh's Largest Grocery Chain2026-06-29
HighBreachConnecticut Medicaid: Credential Theft Breach Exposes 22,500 Patient Records2026-06-29
HighBreachQueensland State Schools: Third-Party Breach via Instructure QLearn Platform2026-06-29
HighRansomwareKyowon Group: Ransomware Attack Exposes Millions of Accounts2026-06-29
HighRansomwareTRANSCORE and 1-800-DENTIST: Qilin Ransomware Leak Site Listings2026-06-29
HighBreachHartford HealthCare: Credential Compromise Breaches 22,500 Accounts2026-06-29
HighBreachRockstar Games: ShinyHunters Extortion Leak2026-06-29
HighBreachNSW Rural Fire Service: Nova Ransomware Breach2026-06-28
HighRansomwareChallenge Manufacturing: Chaos Ransomware Data Theft2026-06-28
HighBreachFrench Employment and HR Apps: Unattributed Mass Data Leak2026-06-28
HighBreachMedtronic: ShinyHunters Data Breach2026-06-28
HighBreachPolymarket: Supply-Chain Phishing Attack2026-06-28
HighBreachTabiq: Cloud Misconfiguration Exposes 1M+ Identity Documents2026-06-28
HighRansomwareGökNur Gıda: Dreamfyre Ransomware Leak of 10.7 TB2026-06-28
HighBreachUniversity of Nottingham: ShinyHunters Data Breach2026-06-28
HighBreachInsee: Cyberattack Exposing Staff Personal Data2026-06-28
HighBreachTrenitalia: Customer Ticket Data Breach via Unauthorized Access2026-06-28
HighBreachDutch Ministry of Finance: Unauthorized Access to Primary Process Systems2026-06-28
HighBreachJapan Self-Defense Forces: China-Linked USB Firmware Espionage2026-06-28
HighBreachTurkish Cypriot Administration: Health Ministry Breach and Dark Web Leak2026-06-27
CriticalCVE · KEVCVE-2026-12415: Unauthenticated Account Takeover in WordPress Invoice Generator Plugin2026-06-27
HighBreachInstructure Canvas: Suspected ShinyHunters Education Sector Breach2026-06-27
HighBreachColorado Health Network and Kentucky Mountain Health Alliance: Cephalus Ransomware and Healthcare Data Breaches2026-06-27
HighBreachNefos Cannabis ID Verification: Exposed Database Leaks One Million Passports2026-06-27
HighRansomwareRiver Financial Corporation: Ransomware Intrusion Disrupts Banking Operations2026-06-27
HighBreachAmerican Tower: ShinyHunters Pay-or-Leak Extortion2026-06-27
HighBreach100+ Organizations: ShinyHunters PeopleSoft Zero-Day Mass Breach2026-06-27
HighBreachCarnival Corporation: Social Engineering Data Breach2026-06-27
HighRansomwareAdapt: ShinyHunters Ransomware Extortion2026-06-26
HighBreachUniversities and Enterprises: ShinyHunters PeopleSoft Zero-Day Campaign2026-06-26
HighBreachReynella East College: Interlock Ransomware Data Dump2026-06-26
HighBreachAlamo Heights ISD: Ransomware Data Breach2026-06-26
HighBreachNAIC: PeopleSoft Zero-Day Breach2026-06-26
HighBreachDialog Network: Exposed Records of NATO and US Officials2026-06-26
HighBreachHealthcare AI Provider: Misconfiguration Exposes 1.4M Humana and Mayo Clinic Patients2026-06-26
HighRansomwarePadget Technologies: Akira Ransomware Data Extortion2026-06-26
HighBreachPrince George County, Va.: Cyberattack Exposes Resident and Employee Data2026-06-26
HighBreachLatvijas valsts meži: Commercially Motivated Hacker Breaches State Forests IT Systems2026-06-26
HighBreachJaguar Land Rover: Russia-Linked Ransomware Attack2026-06-26
HighBreachKlue: Icarus Salesforce Supply-Chain Breach2026-06-26
CriticalCVE · KEVCVE-2026-54636: Critical Container Escape in Dokku's Cron Plugin2026-06-26
HighRansomwareBarts Health NHS: Clop Ransomware via Oracle Zero-Day2026-06-25
HighRansomwareISOPLUS: Qilin Ransomware Data Extortion2026-06-25
HighRansomwareLeo International: Akira Ransomware Data Theft Claim2026-06-25
HighBreachGrafana Labs: Mini Shai-Hulud npm Supply Chain Attack2026-06-25
HighBreachTexas Parks and Wildlife Department: Third-Party Vendor Breach Exposes 3 Million License Holders2026-06-25
CriticalCVE · KEVCisco Unified CM SSRF Flaw (CVE-2026-20230) Added to CISA KEV2026-06-25
CriticalCVE · KEVCVE-2026-12569: Unauthenticated RCE in PTC Windchill and FlexPLM2026-06-25
HighBreachXolis: Targeted Phishing Compromises Healthcare AI Vendor2026-06-25
CriticalCVE · KEVCVE-2026-12417: Unauthenticated Account Takeover in WordPress SignUp & SignIn Plugin2026-06-24
HighRansomwareBajaj Auto: Ransomware Attack Disrupts Systems2026-06-24
CriticalCVE · KEVCVE-2026-12416: Unauthenticated Account Takeover in WordPress Invoice Generator Plugin2026-06-24
HighBreachMadison Square Garden: Vishing Breach Exposes Knicks and Talent Records2026-06-24
HighBreachTchap: Account Hijack Breach of French Government Messaging2026-06-24
HighBreachFortinet Firewalls: FortiBleed Mass Credential Theft Campaign2026-06-24
HighRansomwareRomanian Hospitals: Backmydata Ransomware (Phobos Family)2026-06-24
CriticalCVE · KEVCVE-2026-56237: Critical Authentication Bypass in Capgo API Key Generation2026-06-24
HighBreachTransport for London: Teenage Hackers Breach and 10M Passenger Data Theft2026-06-24
CriticalCVE · KEVCVE-2026-11807: Missing Authorization in Event-Driven Ansible Leaks Plaintext Credentials2026-06-23
HighRansomwareNationsBuilders Insurance Services: Aurora Ransomware Data Theft2026-06-23
HighBreachKDDI: Third-Party Software Exploit Exposes 14.22 Million Email Records2026-06-23
CriticalCVE · KEVCVE-2026-34909: Critical Path Traversal in Ubiquiti UniFi OS2026-06-23
CriticalCVE · KEVCVE-2026-34908: Critical Access Control Flaw in Ubiquiti UniFi OS2026-06-23
HighBreachLastPass: OAuth Token Theft via Klue Supply Chain Attack2026-06-23
HighBreachXsolis: Phishing Driven Healthcare Data Breach2026-06-23
HighBreachSpectrum: ShinyHunters Vishing Breach2026-06-23
HighRansomwareUS Law Firms: Luna Moth Social-Engineering Extortion2026-06-23
CriticalCVE · KEVCVE-2026-34910: Critical Command Injection in Ubiquiti UniFi OS2026-06-23
CriticalCVE · KEVCVE-2025-67038: Critical Root-Level Command Injection in Lantronix EDS5000 Device Servers2026-06-23
HighBreachBelgian State Security (VSSE): Ivanti EPMM Exploitation Exposes Employee Data2026-06-22
HighRansomwareGo2Joy: RansomEXX Ransomware Breach2026-06-22
HighRansomwareCapital Development Authority Islamabad: Billing Systems Ransomware Attack2026-06-22
CriticalCVE · KEVCVE-2026-10561: Critical Unauthenticated RCE in IBM Langflow OSS2026-06-22
CriticalCVE · KEVCVE-2026-56348: n8n Credential Exfiltration via Allowed HTTP Request Domains Bypass2026-06-22
HighBreachTVING: Data Breach Exposes 19.53 Million Users2026-06-22
HighBreachCanada Life: ShinyHunters Salesforce Extortion2026-06-22
CriticalCVE · KEVCVE-2026-7664: Critical Authorization Bypass in IBM Langflow OSS MCP Endpoint2026-06-22
HighBreachKodak: ShinyHunters Extortion Breach2026-06-22
HighBreachTata Electronics: World Leaks Ransomware Breach Exposing Apple, Tesla Trade Secrets2026-06-22
HighBreachCarnival Cruise Line: Social Engineering Breach Exposes 6 Million2026-06-22
HighBreachJCPenney: ShinyHunters PeopleSoft Zero-Day Breach2026-06-21
HighBreachBrazil Civil Defense: Emergency Alert System Hijack2026-06-21
HighBreachU.S. Classified Networks: Anthropic Mythos Autonomous AI Breach2026-06-21
HighRansomwareALS Global: Aurora Ransomware Breach2026-06-21
HighRansomwareDesert Micro: Nova Ransomware Data Extortion2026-06-21
HighRansomwareQ Link Wireless: Qilin Ransomware Attack2026-06-21
HighRansomwareGlobal Schools Group: FulcrumSec Ransomware Attack2026-06-21
HighBreachKlue Customers: Icarus OAuth Token Abuse2026-06-20
HighBreachAfrican National Congress: Black X Extortion Breach2026-06-20
HighBreachInter-Con Security: ShinyHunters Extortion Leak2026-06-20
HighRansomwareSignature Healthcare: Anubis Ransomware2026-06-20
HighBreachHuntress: ShinyHunters Salesforce Data Theft via Klue App2026-06-20
HighRansomwareOne Medical: ShinyHunters Data-Theft Extortion2026-06-19
HighBreachMoody Bible Institute: ShinyHunters Data Theft and Extortion2026-06-19
HighBreachTexas Parks & Wildlife: Vendor Breach Exposes 3 Million Licenses and Passports2026-06-19
HighBreachTexas Parks & Wildlife Department: Third-Party Vendor Breach Exposes 3 Million IDs2026-06-19
HighBreachTexas Parks & Wildlife Department: Third-Party Vendor Breach Exposes 3 Million Residents2026-06-19
HighRansomwareHorizon Family Medical Group: Incransom Ransomware Breach2026-06-19
HighBreachTexas State Agency: Third-Party Vendor Compromise2026-06-19
HighBreachTexas Parks & Wildlife: Third-Party Vendor Breach Exposes 3 Million2026-06-18
HighBreachFortinet: Russian-Speaking Criminals Mass-Compromise FortiGate Gateways2026-06-17
HighBreachMadison Square Garden Sports: ShinyHunters Data Extortion2026-06-17
HighRansomwareAdriatic Port Authority: Anubis Ransomware Cripples Maritime Operations2026-06-17
HighBreachOhio, Georgia, and Arizona Hospital Networks: Coordinated Ransomware Breach2026-06-16
HighBreachiRhythm Holdings: Social Engineering Breach and Extortion2026-06-16
HighBreachInstructure Canvas: ShinyHunters Freemium Tier Breach2026-06-16
HighBreachSysco: ShinyHunters Salesforce Extortion2026-06-16
HighBreachWorld Food Programme: Unauthorized Breach of Gaza Aid Registration Platform2026-06-16
CriticalCVE · KEVCVE-2026-48907: Unauthenticated RCE in Widget Factory's JCE Editor for Joomla2026-06-16
HighBreachHDFC AMC: Morpheus Ransomware Breach and 680 GB Data Theft2026-06-16
HighRansomwareThree U.S. Regional Banks: SilverThread Ransomware Extortion2026-06-16
HighBreachGlendale Community College: ShinyHunters Exfiltrates 62GB From PeopleSoft Campus Solutions2026-06-16
HighBreachNintendo: SHADOWBYT3$ Third-Party SaaS Breach2026-06-16
CriticalCVE · KEVCVE-2026-20262: Cisco Catalyst SD-WAN Manager Path Traversal Flaw Added to CISA KEV2026-06-15
HighBreachMeta Platforms: Confirmed Data Breach Exposes Up to 100,000 Records2026-06-15
CriticalCVE · KEVLiteSpeed cPanel Plugin Symlink Flaw (CVE-2026-54420) Added to CISA KEV2026-06-15
HighRansomwareMackay Sugar: The Gentlemen Ransomware (Storm-2697)2026-06-15
HighBreachHumanity Protocol: North Korean Phishing Crypto Heist2026-06-15
HighBreachKaluga Astral: Week-Long Service Disruption from Cyberattack2026-06-15
HighBreachCouncil of Europe: ShinyHunters PeopleSoft Data Theft2026-06-15
HighBreachEastman Kodak: ShinyHunters Pay or Leak Extortion2026-06-15
HighBreachInfinite Campus: ShinyHunters Extortion Data Leak2026-06-15
HighBreachBerkadia: ShinyHunters Salesforce Extortion Breach2026-06-15
HighBreach700Credit: API Abuse via Compromised Integration Partner2026-06-15
HighBreachNorth American Research Institutions: UNC6508 REDCap Espionage2026-06-15
HighBreachNorfolk and Norwich University Hospital: Qilin Ransomware Patient Data Theft2026-06-12
HighBreachVietnam National Immunization System: Self-Taught Teen Breach2026-06-12
CriticalCVE · KEVIEI iRM-IEI Remote Management Hardcoded Credentials (CVE-2026-11849)2026-06-12
HighBreachCalifornia Water Service: Handala Hack and Leak Breach2026-06-12
HighBreachRalph Lauren Corporation: ShinyHunters Data Extortion2026-06-12
HighBreachNovo Nordisk: Clinical Trials Data Breach2026-06-12
CriticalCVE · KEVCVE-2026-49973: Unauthenticated Account Takeover in Hermes WebUI Setup2026-06-11
HighRansomwareSinging River Health System: Anubis Ransomware Breach2026-06-11
HighBreachUniversities: ShinyHunters Oracle PeopleSoft Mass Compromise2026-06-11
HighBreachOracle PeopleSoft Customers: ShinyHunters Data Theft Extortion2026-06-11
HighRansomwareIsuzu Motors: Qilin Ransomware Cross-Sector Batch2026-06-11
CriticalCVE · KEVCVE-2026-11839: Critical Web Shell Upload Flaw in Başarsoft Rotaban2026-06-11
HighBreachServiceNow: Zero-Auth API Breach Exposes Enterprise Instance Data2026-06-11
HighBreachSynnovis: Qilin Ransomware NHS Data Breach2026-06-11
CriticalCVE · KEVIvanti Sentry CVE-2026-10520: Unauthenticated Root RCE Added to CISA KEV2026-06-11
HighBreachLithuanian Health Ministry: Apache Superset Exploited in Government Breach2026-06-11
HighBreachFrance Titres (ANTS): IDOR Breach Exposes Millions of French Citizens2026-06-11
HighBreachVRChat: External Cloud Breach Exposes 2.4 Million Users2026-06-11
HighBreachCoupang: Insider-Built Backdoor Exposes 37.5 Million2026-06-11
HighBreachNexstar: ShinyHunters Salesforce Data Theft2026-06-11
CriticalCVE · KEVCVE-2026-7852: Critical Unrestricted File Upload Flaw in Limatek LimRAD NAC2026-06-11
HighRansomwareUniversity of Nottingham: ShinyHunters Ransomware Breach2026-06-10
CriticalCVE · KEVCVE-2026-53475: Hardcoded Insecure TLS in assisted-migration-agent Exposes vCenter Admin Credentials2026-06-10
HighBreachDiscord: Disputed Insider Breach Filing Claims 10 Million Users Exposed2026-06-10
CriticalCVE · KEVCVE-2026-53474: Critical SQL Injection in migration-planner via Malicious RVTools Upload2026-06-10
HighBreachOkCupid: Forum Hackers Selling 35 Million Scraped User Records2026-06-10
CriticalCVE · KEVCVE-2026-53476: Critical Path Traversal in Red Hat assisted-migration-agent2026-06-10
HighBreachDelaware North: Microsoft Account Compromise and File Exfiltration2026-06-10
CriticalCVE · KEVCVE-2026-53470: Critical Access Control Flaw in migration-planner Exposes Other Users' OVA Images2026-06-10
HighRansomwareSinging River Health System: Anubis Ransomware Breach2026-06-10
HighRansomwareRéseau Radiologique Romand: Akira Ransomware2026-06-10
HighBreachH1: Soral Leaks 2M+ Medical Professional Records2026-06-10
HighBreachNottingham University: ShinyHunters PeopleSoft Data Theft2026-06-10
HighBreachStation Casinos: Single Compromised Account Leads to PII Breach and Class Action2026-06-10
CriticalCVE · KEVCVE-2026-53469: Missing Authorization in migration-planner Allows Total Data Destruction2026-06-10
CriticalCVE · KEVDoctreat Core for WordPress: Unauthenticated Admin Registration (CVE-2025-6254)2026-06-10
HighRansomwareFESCO Adecco: TheGentlemen Ransomware Breach2026-06-10
CriticalCVE · KEVCritical Unauthenticated File Write Flaw in Splunk Enterprise and Cloud Platform (CVE-2026-20253)2026-06-10
HighBreachHokkaido Medical Center and Hokkaido Cancer Center: Improper Disk Disposal Data Leak2026-06-09
CriticalCVE · KEVCVE-2026-11645: High-Severity Chromium V8 Flaw Lands on CISA's KEV List2026-06-09
HighBreachProprietes-Privees: ChimeraZ API Breach Exposes 2.5M People2026-06-09
CriticalCVE · KEVCritical Code Execution Flaw in Azure Stack Edge — CVE-2026-47643 (CVSS 9.8)2026-06-09
CriticalCVE · KEVCVE-2026-34691: Critical Stored XSS in Adobe Experience Manager Forms JEE2026-06-09
CriticalCVE · KEVCVE-2026-47928: Critical ColdFusion Code Execution Flaw2026-06-09
HighBreachLansing Community College: Compromised Credentials Breach Hits 174,0002026-06-09
CriticalCVE · KEVCVE-2026-7486: Critical SQL Injection in Netcad E-İmar2026-06-09
CriticalCVE · KEVCritical RCE in Windows DHCP Client — CVE-2026-448152026-06-09
HighBreachSoFi Hong Kong: Third-Party Vendor Breach2026-06-09
CriticalCVE · KEVCVE-2026-45657: Critical Windows Kernel Use-After-Free Enables Remote Code Execution2026-06-09
CriticalCVE · KEVArista EOS Tunnel Decapsulation Flaw (CVE-2026-7473) Hits CISA KEV Under Active Exploitation2026-06-09
HighRansomwareFoxconn: Nitrogen Ransomware Breach via Malvertising and ESXi Exploit2026-06-09
CriticalCVE · KEVCVE-2026-45602: Critical Windows DHCP Server Tampering Flaw2026-06-09
CriticalCVE · KEVCVE-2017-20251: Unauthenticated PHP Code Injection in WordPress Insert PHP Plugin2026-06-09
CriticalCVE · KEVCVE-2026-47281: Critical Privilege Escalation Flaw in Visual Studio Code2026-06-09
CriticalCVE · KEVCVE-2026-42904: Critical Windows TCP/IP Heap Overflow Enables Privilege Escalation2026-06-09
CriticalCVE · KEVCVE-2026-48303: Critical Authorization Flaw in Adobe Campaign Classic Enables Remote Code Execution2026-06-09
CriticalCVE · KEVCVE-2026-26142: Critical Deserialization RCE in Nuance PowerScribe2026-06-09
HighRansomwareSinging River Health System: Anubis Ransomware Data Theft2026-06-09
HighBreachTexas Capital Bank: 91,000 Customers Exposed in Data Breach2026-06-09
CriticalCVE · KEVCisco Catalyst SD-WAN Manager Root Command Injection (CVE-2026-20245)2026-06-09
CriticalCVE · KEVCVE-2026-8025: Critical SQL Injection in MOSK CBS Platform2026-06-09
HighBreachWorld Food Programme: Unauthorized Access of Gaza Self-Registration App2026-06-09
HighBreachKyushu Electric Power: Missing SSD Exposes 10.9 Million Records2026-06-09
CriticalCVE · KEVCVE-2026-47291: Critical HTTP.sys Integer Overflow Enables Unauthenticated Remote Code Execution2026-06-09
HighBreachAflac: Scattered Spider Help-Desk Breach2026-06-09
CriticalCVE · KEVCheck Point Security Gateway VPN Auth Bypass: CVE-2026-50751 Added to CISA KEV2026-06-08
HighBreachSyrian Government: Erresira Claims 20GB Diplomatic Document Breach2026-06-08
HighRansomwareChange Healthcare: 190M Record Ransomware Breach2026-06-08
HighRansomwareAT&T: ShinyHunters Ransom Payment for Stolen Call Records2026-06-08
HighRansomwareNigerian Transport Carrier: Unidentified Syndicate Double-Extortion Ransomware2026-06-08
CriticalCVE · KEVCVE-2023-54352: Unauthenticated RCE in WordPress Seotheme2026-06-08
HighRansomwareEvanston Township High School District 202: Ransomware Attack Disrupts Summer Operations2026-06-08
CriticalCVE · KEVBerriAI LiteLLM Command Injection (CVE-2026-42271) Lands in CISA KEV2026-06-08
HighBreachQantas: Scattered Lapsus$ Hunters Dark Web Leak2026-06-08
HighBreachTeamViewer: Russian APT29 Corporate Network Breach2026-06-08
CriticalCVE · KEVCVE-2024-58349: Unauthenticated RCE in WordPress Travelscape Theme2026-06-08
CriticalCVE · KEVCVE-2026-27671: Critical Unauthenticated RCE in SAP NetWeaver ABAP Kernel2026-06-08
HighBreachMedtronic: ShinyHunters Data Breach2026-06-08
HighBreachTchap: Dark Web Actor Claims Massive Government Messaging Breach2026-06-08
CriticalCVE · KEVCVE-2026-11499: Critical Remote Stack Overflow in Tenda HG7, HG9, and HG10 XPON Routers2026-06-08
CriticalCVE · KEVCVE-2024-58348: Unauthenticated RCE in WordPress Background Image Cropper Plugin2026-06-08
HighBreachCreditas: Dark Web Actor Claims Massive Fintech Breach2026-06-08
HighRansomwareUS Trade Association: Genesis Ransomware Claim2026-06-08
CriticalCVE · KEVOpenBullet2 Auth Bypass: One Empty Header Hands Over Admin (CVE-2026-25555)2026-06-08
HighRansomwareLürssen: Ransomware Attack Halts Superyacht Production2026-06-08
HighBreachToyota Financial Services: Medusa Ransomware Attack2026-06-08
CriticalCVE · KEVCVE-2026-39910: Critical Privilege Escalation in STACKIT IaaS API2026-06-08
HighBreachMid and South Essex NHS Trust: Qilin Ransomware Data Theft2026-06-08
CriticalCVE · KEVCVE-2026-41448: AdGuard Home Authentication Bypass via Path Traversal in Admin-Token Cookie2026-06-08
CriticalCVE · KEVCVE-2026-40128: Critical Path Traversal in SAP NetWeaver Application Server Java2026-06-08
HighRansomwareHansoll Textile: Payload Ransomware Campaign Expands2026-06-08
CriticalCVE · KEVCVE-2026-44748: Critical Signature Verification Flaw in SAP NetWeaver AS ABAP2026-06-08
HighBreachFBI: Salt Typhoon Breaches Digital Collection Systems Network2026-06-07
HighBreachCISA: Chemical Security Assessment Tool Breach2026-06-07
HighBreachOxford University: CareerConnect Vendor Breach via Group GTI2026-06-07
HighRansomwareBELFOR Asia: INC Ransom Breach2026-06-07
HighBreachDentaQuest: ShinyHunters Leak Exposes 2.6 Million2026-06-07
HighRansomwareKriete Truck Centers: Securotrop Ransomware Listing2026-06-07
HighBreachBaker Distributing: ShinyHunters Salesforce and SharePoint Leak2026-06-07
HighBreachNSCC Tianjin: Alleged 10PB Classified Data Breach2026-06-07
HighRansomwareAccess Dental: WorldLeaks Ransomware Breach2026-06-07
HighBreachCity of Vallejo: Constant Contact Email Platform Hijacked2026-06-07
HighBreachTradeify: macaroni Leaks 240K Customer Records via Exposed API Key2026-06-07
HighRansomwareICBC Financial Services: Ransomware Attack Disrupts Treasury Market2026-06-07
HighBreachFBI Director Kash Patel: Handala Hack Team Gmail Breach2026-06-07
HighRansomwareUS Telecom Provider: Akira Ransomware Breach Claim2026-06-07
HighBreachMeridianbet: INF GRUPA Customer Database Breach2026-06-07
HighBreachIBM: APT10 Breach Coverup Allegations2026-06-07
HighBreachRCI Hospitality: IDOR Vulnerability Exposes 40,000 Contractors2026-06-07
HighBreachConduent Business Services: Healthcare Data Breach Impacts 62.2M2026-06-06
HighRansomwareAspire Hospital: Nova Ransomware Claim2026-06-06
HighBreachErie Family Health: 570K Patient Breach After 48 Day Network Intrusion2026-06-06
HighRansomwareRUAG: Akira Ransomware Payment Confirmed2026-06-06
HighBreachUN World Food Program: Gaza Enrollment System Breach Exposes 600,000 Households2026-06-06
HighBreachClarinda Regional Health Center: LockBit5 Ransomware Breach2026-06-06
HighRansomwareIreland HSE: Third-Party Vendor Ransomware Outage2026-06-06
HighBreachIlluminate Education: FTC Finalizes Order Over Student Data Breach2026-06-06
HighBreachStrategic Education: Unknown Actor Exfiltrates SSNs in 87-Day Stealth Breach2026-06-05
HighRansomwareMountain Park, Oklahoma: Municipal Ransomware Attack2026-06-05
HighRansomwareAvcon Jet: Qilin Ransomware Attack2026-06-05
HighBreachIBM and AT&T: Concealed Foreign Breaches of Federal Cloud Infrastructure2026-06-05
CriticalCVE · KEVCVE-2026-28318: SolarWinds Serv-U Unauthenticated Crash via Deflate-Encoded POST2026-06-05
HighRansomwareOaks Park and Kennon Worldwide: Akira Ransomware Extortion2026-06-05
CriticalCVE · KEVCVE-2025-71317: Hard-Coded Backdoor in Riello NetMan 204 Grants Unauthenticated Admin Access2026-06-05
HighRansomwarePyramid: Nitrogen Ransomware Attack2026-06-05
HighBreachColumbia University: Politically Motivated Breach Exposes 868,969 Records2026-06-05
HighBreachGrindr: Alleged Sale of 15 Million User Records2026-06-05
HighRansomwareSicol: SpaceBears Ransomware Attack2026-06-05
HighRansomwareInstructure Canvas: ShinyHunters Ransomware Breach2026-06-05
CriticalCVE · KEVCVE-2026-10580: Unauthenticated Admin Takeover in Hippoo Mobile App for WooCommerce2026-06-05
HighBreachOsmose France: Alleged Dark Web Data Breach Claim2026-06-05
HighRansomwareSA2000: Stormous Ransomware Breach2026-06-05
HighRansomwareFactors Western: Akira Ransomware Attack2026-06-05
CriticalCVE · KEVCVE-2026-6274: Critical Authentication Bypass in DTS Redline WR3200 Routers2026-06-05
HighRansomwareNational Standard Parts Associates: Akira Ransomware Data Leak2026-06-05
CriticalCVE · KEVCVE-2025-71318: NetMan 204 Missing Authentication Exposes UPS Control to Remote Attackers2026-06-05
HighBreachIKEA: Lapsus$ Alleged 180GB Data Leak Investigation2026-06-05
HighBreachUltrahuman: Infostealer Malware Breach via Stolen Employee Credentials2026-06-05
HighBreach23andMe: California AG Sues Over 2023 Credential-Stuffing Breach2026-06-04
HighBreachEuropean Commission: TeamPCP and ShinyHunters Cloud Breach2026-06-04
HighBreachCAEM Mexico: Sativa Gang Leaks 21GB SIAF Database2026-06-04
CriticalCVE · KEVCVE-2026-4104: Critical SQL Injection and Authorization Bypass in Akmer TeknoPass2026-06-04
HighRansomwareMarketJoy: Qilin Ransomware Extortion2026-06-04
HighBreachAnonymous Video Chat App: 22 Million Record Exposure2026-06-04
HighRansomwareViaQuest: Ransomware Attack Exposes Patient and Employee Data2026-06-04
CriticalCVE · KEVCVE-2019-25727: Arbitrary File Download in WordPress Ad Manager WD Plugin2026-06-04
HighBreachSpanish National Police and INCIBE: Granada-Based Doxing Operation2026-06-04
CriticalCVE · KEVCVE-2019-25741: MobaXterm 12.1 SEH Buffer Overflow via Malicious Session File2026-06-04
HighRansomwareCase Law Correctional Services: Black X Ransomware Breach2026-06-04
HighBreachUN World Food Programme: Self-Registration Platform Breach2026-06-04
HighBreachCarnival Cruise: ShinyHunters Social Engineering Breach2026-06-04
HighBreachiFood: 1.2 Million Brazilian Users Exposed in Confirmed Breach2026-06-04
HighBreachPemprov DKI Jakarta: Citizen CRM and NIK Identities Leaked2026-06-04
HighBreachMorocco Civil Records: Jabaroot Watiqa.ma Data Leak2026-06-04
CriticalCVE · KEVCVE-2026-10840: OpenShift Pipelines Operator Grants Authenticated Users Write Access to Kueue and cert-manager Resources2026-06-04
CriticalCVE · KEVCVE-2019-25738: WordPress Hybrid Composer Unauthenticated Settings Change2026-06-04
HighBreachNYC Health + Hospitals: Third-Party Vendor Breach Exposes 1.8M Patients2026-06-04
HighBreachIberdrola: Alleged 110 GB Customer Database Sale2026-06-04
HighBreachISSSTE Mexico: Pension Database Liquidated on Dark Web2026-06-04
HighRansomwareArlington ISD: Ransomware Attack Delays Summer School2026-06-04
HighRansomwareIQL-Nog: SafePay Ransomware Attack2026-06-04
CriticalCVE · KEVCVE-2019-25729: PDF Signer 3.0 Server-Side Template Injection Leads to Unauthenticated RCE2026-06-04
HighBreachGitHub: Supply Chain Compromise via Poisoned VS Code Extension2026-06-04
HighBreachIEEA Campeche: l1ghtSoulHem Claims Staff and Student Database Leak2026-06-04
HighRansomwareACE Hospital: KillSec Ransomware Attack2026-06-04
HighBreachNational Testing Agency: Superadmin Bypass and JEE Advanced Data Exposure2026-06-03
HighBreachDutch Hotels: Mass Booking Data Breach Fuels Payment Scams2026-06-03
CriticalCVE · KEVCVE-2026-45247: Mirasvit Cache Warmer PHP Object Injection Hits CISA KEV2026-06-03
HighRansomwareArmenia Ministry of Internal Affairs: WOLVES OF TURAN Ransomware Claim2026-06-03
HighBreachSpectrum: ShinyHunters Voice Phishing Breach2026-06-03
HighBreachIIT Roorkee: Misconfigured Cloud Storage Exposes 1.79 Lakh JEE Advanced Candidates2026-06-03
HighBreachIMA Diligence Services: Genesis Ransomware Breach Exposes 525,3062026-06-03
HighRansomwareWeil Gotshal & Manges: $20M Ransomware Extortion Payout2026-06-03
HighBreachSafaricom: Insider Data Theft Exposes 11.5 Million Subscribers2026-06-03
HighBreachWiley Rein: Law Firm Data Breach and Class Action Lawsuit2026-06-03
HighBreachMiddle East Organizations: Iran-Linked Wiper Campaign2026-06-03
CriticalCVE · KEVCVE-2026-35075: Hard-Coded Firmware Password Grants Unauthenticated Full Device Access2026-06-03
HighBreachTVING: Unknown Hackers Breach Member Database2026-06-03
HighBreachTulane University: Clop Ransomware Oracle Zero-Day Breach2026-06-03
HighBreachRed Hat NPM: Supply Chain Worm Attack2026-06-02
HighRansomwareSquamish.net and Synex International: BrainCipher Ransomware Coordinated Strike2026-06-02
HighRansomwareLimburg-Weilburg County Administration: Abyss Ransomware Attack2026-06-02
HighBreachInstagram: Meta AI Prompt Injection Account Hijack2026-06-02
CriticalCVE · KEVCVE-2026-47117: OpenMed Privacy-Filter Loads Attacker-Controlled Models as Code2026-06-02
CriticalCVE · KEVCVE-2026-5076: ARMember Premium WordPress Plugin Stores Plaintext Password Reset Keys2026-06-02
HighBreachLithuanian Centre of Registers: Suspected Hostile State Credential Abuse2026-06-02
HighBreachLuton and Dunstable Hospital: Supply Chain Ransomware Exposes 33K Patients2026-06-02
HighBreachMiddle East Organizations: Iran-Linked MOIS Wiper Campaign2026-06-02
HighBreachSt. Joseph County: Handala Hack Claims 2TB Data Breach2026-06-02
HighRansomwareSquamish.net and Synex International: BrainCipher Ransomware Cross-Continental Attack2026-06-02
CriticalCVE · KEVCVE-2022-0492: Linux Kernel cgroups v1 release_agent Privilege Escalation2026-06-02
CriticalCVE · KEVCVE-2025-48595: Android Framework Integer Overflow Enables Local Privilege Escalation2026-06-02
HighRansomwareEriell: Nova Ransomware Listing2026-06-02
CriticalCVE · KEVCVE-2026-8206: Kirki WordPress Plugin Account Takeover via Password Reset Flaw2026-06-02
HighBreachDashlane: 2FA Brute-Force Attack Steals Customer Password Vaults2026-06-02
HighRansomwareBuffalo Convention Center: Akira Ransomware Attack2026-06-02
HighBreachHungerRush: SendGrid API Extortion and Supply Chain Poisoning2026-06-01
CriticalCVE · KEVCVE-2026-9319: Critical Deserialization Flaw in IBM WebSphere Application Server2026-06-01
CriticalCVE · KEVCVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability Added to CISA KEV2026-06-01
HighRansomwareVVO Finance: Everest Ransomware Attack2026-06-01
HighBreachMexico Ministry of Welfare: BOLA/IDOR Exploit Chain Leaks 1GB of Citizen Data2026-06-01
HighBreachCBSE: Teen Researcher Exposes OSM Portal Vulnerabilities2026-06-01
HighRansomwareCarton Craft Supply: Qilin Ransomware Attack2026-06-01
CriticalCVE · KEVCVE-2026-8644: Critical Identity Spoofing Flaw in IBM WebSphere Application Server2026-06-01
HighRansomwareInstructure Canvas: Shiny Hunters Extortion Settlement2026-06-01
HighBreachPakistan Higher Education Commission: 1.5 Million Citizen Records Leaked on Cybercrime Forum2026-06-01
HighRansomwareVodafone: Lapsus$ Ransomware Claim and Source Code Leak2026-06-01
CriticalCVE · KEVCVE-2018-25427: Stack Buffer Overflow in Arm Whois 3.11 Enables Arbitrary Code Execution2026-06-01
HighBreachMercor: LiteLLM Supply-Chain Compromise2026-06-01
CriticalCVE · KEVCVE-2026-9311: Critical Remote Code Execution in IBM WebSphere Application Server2026-06-01
HighBreachLACMTA: Iranian MOIS-Linked Group Attribution2026-05-31
HighBreachFortinet: Dark Web Threat Actor Claims Data Breach2026-05-31
CriticalCVE · KEVCVE-2026-10187: Totolink N300RH Stack-Based Buffer Overflow in setWiFiBasicConfig2026-05-31
HighRansomwareAsopagos S.A.: Everest Ransomware Claims Colombian Financial Entity2026-05-31
HighBreachDrift Protocol and KelpDAO: Lazarus Group Crypto Heist2026-05-31
HighBreachVercel: ShinyHunters Breach Threatens DeFi Frontends2026-05-31
HighBreachCarnival Corporation: Social Engineering Breach Exposes 6M Travelers2026-05-31
HighBreachIndustrial Acceptance Corporation: INC Ransomware Breach Exposes 79,216 SSNs2026-05-31
HighBreachiGreen Energy: Mass Data Liquidation via Predictable S3 URLs2026-05-31
HighRansomwareCity of Hamilton: Ransomware Attack Cripples Municipal Services2026-05-31
HighRansomwareHDFC AMC: Morpheus Ransomware Breach2026-05-31
HighBreachUK Immigration System: Third-Party Vulnerability Exposes Visa Applicant Data2026-05-31
HighRansomwareBelimed AG: Incransom Ransomware Breach2026-05-30
HighRansomwareAKM Corporation: Everest Ransomware Attack2026-05-30
CriticalCVE · KEVCVE-2018-25412: Delta SQL 1.8.2 Unauthenticated Arbitrary File Upload Leading to RCE2026-05-30
HighBreachHome Depot Canada: Alleged DarkWeb Breach Claim2026-05-30
HighRansomwareDistrigaz Vest: INC Ransom Ransomware Attack2026-05-30
HighBreachADT Inc.: ShinyHunters Vishing Attack2026-05-30
HighRansomwareLabExpress: incransom Ransomware Breach Exposes 200GB2026-05-30
HighBreachCarnival Corporation: ShinyHunters Vishing Breach2026-05-30
HighRansomwareTransferZ: Everest Ransomware Attack2026-05-30
HighBreachKemper Corporation: ShinyHunters Salesforce Extortion Breach2026-05-29
CriticalCVE · KEVCVE-2026-10071: Unauthenticated Arbitrary File Upload in Interinfo DreamMaker2026-05-29
HighRansomwareSandstone, MN: Qilin Ransomware Breach2026-05-29
CriticalCVE · KEVCVE-2026-8732: Unauthenticated Admin Takeover in WP Maps Pro WordPress Plugin2026-05-29
HighRansomwareOpen Door Health Center: INC Ransomware Claim2026-05-29
HighBreachBCD Travel: ShinyHunters Alleged Salesforce and SharePoint Breach2026-05-29
CriticalCVE · KEVCVE-2026-0257: Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass2026-05-29
HighRansomwareWG Neukölln eG: DragonForce Ransomware Attack2026-05-29
HighBreachConnecticut Husky Medicaid Portal: Credential Theft and Payment Diversion Attempt2026-05-29
HighRansomwareQLS Group: DragonForce Ransomware Breach2026-05-29
HighBreachMexican Government: Chronus Group Breach2026-05-29
HighRansomwareEPB Insurance: DragonForce Ransomware Claim2026-05-29
HighBreachLithuanian Centre of Registers: Hostile State Actors Breach National Data Systems2026-05-29
CriticalCVE · KEVCVE-2026-3655: Authentication Bypass in WordPress OTP Login With Phone Number Plugin2026-05-29
CriticalCVE · KEVCVE-2026-4290: Unauthenticated Arbitrary User Deletion in WP Travel Pro2026-05-29
HighRansomwareAlpha Group Holdings: Qilin Ransomware Leak Site Listing2026-05-28
HighBreachSouth Korean Electronics Giant: Seedworm APT Espionage Breach2026-05-28
CriticalCVE · KEVCVE-2026-34311: Critical Unauthenticated Takeover in Oracle Hospitality OPERA 52026-05-28
HighRansomwareJC Ripberger Construction: DragonForce Ransomware Leak2026-05-28
HighBreachAjax FC: Unpatched Web Vulnerability Exposes 300,000 Fan Records2026-05-28
CriticalCVE · KEVCVE-2026-46839: Critical Takeover Flaw in Oracle REST Data Services2026-05-28
HighRansomwareMt. Spokane Pediatrics: LockBit 5.0 Ransomware Attack2026-05-28
HighBreachLACMTA: Iranian State-Sponsored Breach2026-05-28
HighRansomwareOtthon Centrum: Qilin Ransomware Attack2026-05-28
HighRansomwareWest Pharmaceutical Services: Ransomware Attack Disrupts Global Operations2026-05-28
CriticalCVE · KEVCVE-2026-46819: Critical Unauthenticated Flaw in Oracle Internet Procurement Connector2026-05-28
HighBreachFlorida Physician Specialists: Network Intrusion Exposes 276K Patient Records2026-05-28
HighBreachAmeriprise Financial: ShinyHunters 200GB Salesforce and SharePoint Leak2026-05-28
HighRansomwareUS Law Firms: Silent Ransom Group Physical Intrusion Campaign2026-05-28
CriticalCVE · KEVCVE-2026-46822: Critical Oracle iAssets Flaw Enables E-Business Suite Takeover2026-05-28
CriticalCVE · KEVCVE-2026-24444: Hardcoded Password Backdoor in SDMC NE6037 Cable Modem Routers2026-05-28
HighRansomwareSunrise Company: Akira Ransomware Exfiltration2026-05-28
HighBreachDataprev: INSS Beneficiary Data Leak2026-05-28
CriticalCVE · KEVCVE-2026-4408: Samba "check password script" Command Injection Enables Unauthenticated RCE2026-05-28
CriticalCVE · KEVCVE-2026-46840: Critical Unauthenticated Takeover in Oracle REST Data Services2026-05-28
CriticalCVE · KEVCVE-2026-46775: Critical Takeover Flaw in Oracle REST Data Services2026-05-28
CriticalCVECVE-2026-8809: Unauthenticated Admin Takeover in ACF Extended for WordPress2026-05-28
CriticalCVE · KEVCVE-2026-46824: Critical Oracle E-Business Suite Universal Work Queue Takeover2026-05-28
HighBreachCharter Communications: ShinyHunters Vishing SaaS Extortion2026-05-28
CriticalCVE · KEVCVE-2026-46833: Critical Oracle Database Net Service Takeover Flaw2026-05-28
HighBreachUruguay Antel Identity Service: La Pampa Leaks Data Exfiltration2026-05-28
HighBreachManageMyHealth: Preventable Breach Exposes 99,416 NZ Patient Records2026-05-27
HighBreachSalesforce Customers: ShinyHunters Extortion Wave2026-05-27
CriticalCVE · KEVCVE-2025-12686: Critical Buffer Overflow in Synology BeeStation Enables Unauthenticated RCE2026-05-27
CriticalCVE · KEVCVE-2026-8175: Critical Buffer Overflow in IBM Aspera High-Speed Transfer2026-05-27
HighRansomwareSPH Value: DragonForce Ransomware Attack2026-05-27
HighRansomwareEnns & Company: DragonForce Ransomware Attack2026-05-27
CriticalCVE · KEVCVE-2026-45321: TanStack npm Supply Chain Compromise via OIDC Token Theft2026-05-27
HighRansomwareCushman & Wakefield: ShinyHunters and Qilin Dual Ransomware Attack2026-05-27
HighRansomwareMyPillow: Play Ransomware Leak Site Listing2026-05-27
CriticalCVE · KEVCVE-2026-8398: Trojanized DAEMON Tools Lite Installers Distributed via Official Vendor Channel2026-05-27
CriticalCVE · KEVCVE-2026-48027: Malicious Nx Console Extension Pushed to VS Code Marketplace and OpenVSX2026-05-27
HighRansomwareIDS Group: Rhysida Ransomware Attack2026-05-27
HighBreachLACMTA: Iranian State-Linked Hackers Breach Los Angeles Transit2026-05-27
HighRansomwareCovenant Health: Qilin Ransomware Breach2026-05-27
CriticalCVE · KEVCVE-2026-8760: Login with OTP WordPress Plugin Auth Bypass via Brute-Forceable OTP2026-05-27
HighRansomwareXchange Technology Rentals: DragonForce Ransomware Attack2026-05-27
CriticalCVE · KEVCVE-2026-7524: Critical RCE in IBM Langflow OSS via Symlink Archive Extraction Flaw2026-05-27
HighRansomwareMarks & Spencer: Scattered Spider/DragonForce Ransomware2026-05-26
HighRansomwareBASE SpA: SpaceBears Ransomware Attack2026-05-26
HighRansomwareNL Fisher: Play Ransomware Strikes Dutch Food Producer2026-05-26
CriticalCVE · KEVCVE-2026-48172: LiteSpeed cPanel Plugin Privilege Escalation Exploited in the Wild2026-05-26
HighRansomwareUniversity of Valencia: Nova Ransomware Claim2026-05-26
HighRansomwareExpoCredit: Qilin Ransomware Claim2026-05-26
HighBreachStation Casinos: External Threat Actor Data Breach2026-05-26
CriticalCVE · KEVCVE-2026-8633: Critical RCE in IBM WebSphere Web Server Plug-ins2026-05-26
HighRansomwareGlobal Retool Group: Qilin Ransomware Claim2026-05-26
CriticalCVE · KEVCVE-2026-48689: FastNetMon Community Edition Off-by-One Heap Overflow2026-05-26
HighRansomwareJAKN and GGroupCPAs: DragonForce Ransomware Double Listing2026-05-26
HighBreachHeartland Growers and HELIX INTERNATIONAL: DragonForce Ransomware2026-05-26
HighRansomwareSanatorio Delta: thegentlemen Ransomware Claim2026-05-26
HighBreachOnlyFans: 340M User Records Allegedly for Sale on Leak Forum2026-05-26
HighRansomwareBrazil SECONT: Nova Ransomware Claims Attack on Government Transparency Body2026-05-26
HighBreachRomania EduSal: 331K Education Records Allegedly Leaked by Threat Actor 'somewhere'2026-05-26
HighBreachWisERP: Dark Web Auction of Core ERP Database2026-05-26
HighBreachRussia FSB: Core Intelligence Repository Leaked Across Dark Web2026-05-26
HighRansomwareSaver NV: DragonForce Ransomware Extortion2026-05-26
HighBreachEGADGETS Pakistan: Dark Web Actor Claims 80M Record Telecom Leak2026-05-26
CriticalCVE · KEVCVE-2026-48904: Joomla! Privilege Escalation via com_users Webservice Endpoint2026-05-26
CriticalCVE · KEVCVE-2026-48898: Joomla Privilege Escalation via com_users Batch Task2026-05-26
HighRansomwareBusinessRecord.com: DragonForce Ransomware Attack2026-05-26
CriticalCVE · KEVCVE-2026-7374: KubeVirt virt-handler Symlink Flaw Enables Full Cluster Takeover2026-05-26
HighRansomwareFirst VPN: Operation Saffron Takedown2026-05-26
HighBreachLithuania Centre of Registers: Suspected Foreign Intelligence Breach2026-05-26
CriticalCVE · KEVCVE-2026-48899: Joomla Privilege Escalation via com_users2026-05-26
HighRansomwareLe Perreux-sur-Marne: Ransomware Attack Disrupts Municipal Services2026-05-26
HighBreachRadiology Associates of Richmond: 266,000 Patients Exposed in July 2025 Intrusion2026-05-26
HighBreachCarnival Cruise Line: ShinyHunters Data Breach and Notification Failure2026-05-26
HighBreachPortugal SNS: Over 100,000 Patient Records Stolen via Compromised Doctor Credentials2026-05-26
HighBreachOpen Source Developers: TrapDoor Supply Chain Attack2026-05-26
HighBreachNigeria: 80 Million Citizen Records Leaked on Dark Web2026-05-26
HighBreachCERVI: Alleged Breach of South African Digital Health Platform2026-05-26
CriticalCVE · KEVCVE-2026-8855: IBM HTTP Server RCE and DoS via TLS Mutual Authentication2026-05-26
HighRansomwareOpenmind Networks: TheGentlemen Ransomware Breach2026-05-26
HighRansomwareThe Adviser: Brain Cipher Ransomware Breach2026-05-26
HighBreachPT Bank Negara Indonesia (BNI): TripleX Data Breach2026-05-26
CriticalCVE · KEVCVE-2026-8856: IBM HTTP Server Denial-of-Service via Writable Configuration2026-05-26
HighRansomwareLa Familia Adult Day Center: NightSpire Ransomware Breach2026-05-26
HighBreachPhilippine Government Agencies: Multi-Agency Repository and Salary Ledger Leak2026-05-26
HighRansomwareTurkey TKGM: APT73/Bashe Ransomware Attack2026-05-24
HighRansomwareCablematic: Gunra Ransomware Claim2026-05-24
HighBreachHillpointe: Dark Web Actor Claims 2.5M Record Breach2026-05-23
HighRansomwareVernon & Ginsburg: Qilin Ransomware Data Extortion2026-05-23
HighRansomwareA-Sonic Logistics: Payload Ransomware Attack2026-05-23
HighBreachVietnamese Ministerial Agencies: Serious Data Theft Attack Confirmed by VNCERT2026-05-23
HighBreachConnecticut Medicaid (HUSKY): Credential Compromise Exposes 22,500 Enrollees2026-05-23
HighRansomwareUniversity of Mississippi Medical Center: Ransomware Attack and Potential HIPAA Violation2026-05-23
HighRansomwareSemgrep: Qilin Ransomware Attack2026-05-23
HighRansomwareRobinsons Singapore: Alleged Ransomware Attack2026-05-23
HighRansomwareStarbucks: shadowbyt3$ Ransomware Breach2026-05-23
HighBreachBit2Win: Alleged Source Code Sale on Dark Web2026-05-23
HighBreachPassion for a Purpose: Handala Hack and Leak Operation2026-05-23
HighRansomwareCharter Communications: ShinyHunters Ransomware Attack2026-05-23
HighBreachEducation LMS Platform: Ransomware Crew Steals 275M Records2026-05-23
HighBreachLithuania State Registry: 600,000 Records Exfiltrated in Cross-Border Cyber Intrusion2026-05-23
HighRansomwareBuffalo Niagara Convention Center: Akira Ransomware Attack2026-05-23
HighRansomwareMinsa: APT73/Bashe Ransomware Attack2026-05-23
HighRansomwareInternal Medicine and Pediatrics of Cullman: Payload Ransomware Leak Site Listing2026-05-23
HighBreachAtol Group: Alleged Dark Web Sale of 5.9M Customer Records2026-05-23
HighRansomwareGITIS: Akira Ransomware 30GB Data Extortion2026-05-23
HighRansomwareKarlin Foods: Akira Ransomware Attack2026-05-23
HighRansomwareDentaQuest: ShinyHunters Ransomware Claim2026-05-23
HighBreachUnimed: Billing Provider Breach Cascades Across German University Hospitals2026-05-23
HighBreachMedical Provider: BlackCat Insider Affiliates Sentenced2026-05-22
HighRansomwareCardinal Services: Rhysida and INC Ransomware Double Breach2026-05-22
HighRansomwarePort of Seattle: Rhysida Ransomware Data Theft2026-05-22
HighBreachTrump Mobile: Customer Data Exposure via Third Party Platform2026-05-22
HighRansomwareVega Corp: DragonForce Ransomware Attack2026-05-22
CriticalCVE · KEVCVE-2026-9082: Drupal Core SQL Injection Enables Privilege Escalation and RCE2026-05-22
HighBreachGerman University Hospitals: Third-Party Billing Provider Breach2026-05-22
HighRansomwareVial Agro: Qilin Ransomware Attack2026-05-22
HighBreachT-Mobile and Sprint: 58 Million Consumer Lines Auctioned on Dark Web2026-05-22
HighBreachNYC Hospital Network: 1.8M Patient Records and Biometric Fingerprints Exfiltrated2026-05-22
HighRansomwareAdvancedHEALTH: DragonForce Ransomware Breach2026-05-22
HighBreachAlmerys: 44 Million Healthcare Records Listed on Hacker Forum2026-05-22
HighRansomwareExchange Group: Pear Ransomware Attack2026-05-22
HighRansomwareLiberty Mutual: Everest Ransomware Breach Exposes 15,000+ Policyholders2026-05-22
HighRansomwareStuttgart: Rhysida Ransomware Data Theft Claim2026-05-22
HighRansomwarePorter W Yett: Qilin Ransomware Attack2026-05-22
HighRansomwareBeacon Mutual: Ransomware Attack Exposes 132,000 Rhode Islanders2026-05-22
CriticalCVE · KEVCVE-2026-6279: Unauthenticated RCE in Avada Builder for WordPress2026-05-21
HighRansomwareKabushiki Gaisha Hodozuka Setsubi: Payload Ransomware Attack2026-05-21
HighBreachPerm National Research Polytechnic University: Dark Web Data Leak Exposes 360K+ Records2026-05-21
CriticalCVE · KEVCVE-2026-34926: Trend Micro Apex One On-Premise Directory Traversal Added to CISA KEV2026-05-21
CriticalCVE · KEVCVE-2026-6960: Unauthenticated Arbitrary File Upload in BookingPress Pro for WordPress2026-05-21
HighBreachErie Family Health Centers: 570,000 Patient Records Exposed in 48-Day Network Intrusion2026-05-21
HighBreachAFC Ajax: Data Breach via Exposed APIs and Shared Keys2026-05-21
HighBreachUruguay DNIC: Alleged Dark Web Leak of 5.8M Citizen Records2026-05-21
CriticalCVE · KEVCVE-2026-5118: Divi Form Builder WordPress Plugin Privilege Escalation to Admin2026-05-21
HighBreachGlobal Cardholders: B1ack's Stash Carding Marketplace Dump2026-05-21
CriticalCVE · KEVCVE-2025-34291: Langflow CORS Misconfiguration Enables Account Takeover and RCE2026-05-21
HighBreachMicrosoft: Fox Tempest Malware-Signing-as-a-Service Disruption2026-05-21
HighRansomwareMonir Precision Monitoring: Qilin Ransomware Attack2026-05-20
CriticalCVE · KEVCVE-2008-4250: Microsoft Windows Server Service RPC Buffer Overflow Resurfaces on CISA KEV2026-05-20
CriticalCVE · KEVCVE-2026-7637: Unauthenticated PHP Object Injection in WordPress Boost Plugin2026-05-20
HighBreachUnit 221B: ShinyHunters Retaliation Campaign2026-05-20
CriticalCVE · KEVCVE-2009-1537: Microsoft DirectX QuickTime Parser Flaw Added to CISA KEV2026-05-20
CriticalCVE · KEVCVE-2010-0249: Internet Explorer Use-After-Free Resurfaces on CISA KEV2026-05-20
HighBreachStewarts Care: Third-Party Recruiter Breach Exposes Staff Data2026-05-20
CriticalCVE · KEVCVE-2026-9139: Hard-Coded Credentials in Taiko AG1000-01A SMS Alert Gateway2026-05-20
CriticalCVE · KEVCVE-2026-9141: Authentication Bypass in Taiko AG1000-01A SMS Alert Gateway2026-05-20
HighBreachNacogdoches Memorial Hospital: 2.5M Patient Records Exfiltrated in Network Intrusion2026-05-20
CriticalCVE · KEVCVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Resurfaces on CISA KEV2026-05-20
HighRansomwareExtant Aerospace: Ransomware Attack Exposes Employee SSNs at DoD Supplier2026-05-20
HighBreachVUMI: Dark Web Extortion Claim Over 300,000 Records2026-05-20
CriticalCVE · KEVCVE-2026-45498: Microsoft Defender Denial of Service Vulnerability2026-05-20
CriticalCVE · KEVCVE-2026-7284: Easy Elements for Elementor Plugin Allows Unauthenticated Admin Takeover2026-05-20
CriticalCVE · KEVCVE-2026-6555: Unauthenticated RCE in ProSolution WP Client Plugin via Arbitrary File Upload2026-05-20
HighBreachUruguay DNIC: Alleged 5.8M Citizen Database Leak2026-05-20
CriticalCVE · KEVCVE-2010-0806: Internet Explorer Use-After-Free Resurfaces on CISA KEV2026-05-20
HighBreachGitHub: TeamPCP Internal Repo Breach2026-05-20
HighBreachSA Web Hosts and Telecoms: 'Black Matter' DDoS Extortion Campaign2026-05-20
CriticalCVE · KEVCVE-2026-41091: Microsoft Defender Link Following Flaw Lets Local Attackers Escalate to SYSTEM2026-05-20
CriticalCVE · KEVCVE-2026-20223: Cisco Secure Workload REST API Auth Bypass Grants Site Admin Access2026-05-20
CriticalCVE · KEVCVE-2026-4885: Unauthenticated Arbitrary File Upload in Piotnet Addons for Elementor Pro2026-05-19
HighBreachArwini Niedersachsen: Kairos Ransomware Data Exfiltration2026-05-19
HighRansomwareVacu-Lug: Akira Ransomware 40GB Data Heist2026-05-19
HighBreachSafaricom: Kenyan High Court Ruling on Telecom Data Breach2026-05-19
CriticalCVE · KEVCVE-2026-4883: Unauthenticated Arbitrary File Upload in Piotnet Forms WordPress Plugin2026-05-19
HighRansomwareMetaval: INC Ransom Claims 80GB Data Theft2026-05-19
HighBreachAura: ShinyHunters Vishing Breach2026-05-19
HighBreachUS Healthcare Sector: Multiple Breaches Expose Millions via HHS Tracker2026-05-19
CriticalCVE · KEVCVE-2026-43633: Unauthenticated Root RCE in HestiaCP Web Terminal2026-05-19
HighBreachGîtes de France: Customer Data Theft Exposes 389,000 Records2026-05-19
HighBreachTabiq: 1M+ Passports Exposed via Public S3 Bucket2026-05-19
HighBreachEnterprise Cloud Tenant: Storm-2949 Identity-Driven Breach2026-05-19
HighBreachPitney Bowes: ShinyHunters Salesforce Breach2026-05-18
HighBreachCanvas (Instructure): Global LMS Breach Impacting 9,000 Institutions2026-05-18
CriticalCVE · KEVCVE-2026-42822: Critical Authentication Bypass in Azure Local Disconnected Operations2026-05-18
HighBreachUS Fuel Infrastructure: Suspected Iranian ATG Intrusions2026-05-18
HighRansomwareClinica Avellaneda: Qilin Ransomware Attack2026-05-18
CriticalCVE · KEVCVE-2026-45230: Unauthenticated Path Traversal in DumbAssets Enables Arbitrary File Deletion2026-05-18
HighRansomwareURG OEM: Nova Ransomware Attack2026-05-18
HighBreach7-Eleven: ShinyHunters Salesforce Breach2026-05-18
HighRansomwareInstructure: ShinyHunters Canvas Extortion2026-05-18
HighBreachCISA: Contractor Leaks AWS GovCloud Keys on Public GitHub2026-05-18
HighBreachNYC Health + Hospitals: 1.8M Patient Records Stolen in Breach2026-05-18
HighRansomwareWTI Transport: Chaos Ransomware 72-Hour Ultimatum2026-05-18
HighBreachSamuel Shay: Handala Claims Breach of Israeli Normalization Architect2026-05-18
HighBreachTransUnion: Consumer Data Breach Exposes 4.4 Million Records2026-05-18
HighBreachOracle: 2026 Multi-System Cloud and Health Data Breach2026-05-18
HighBreachBelambra: Tourism Sector Data Breach Wave2026-05-18
CriticalCVE · KEVCVE-2026-8836: Critical Stack Buffer Overflow in lwIP SNMPv3 USM Handler2026-05-18
HighBreachIrish Revenue Commissioners: 137 Staff Exposed in Pitney Bowes Ransomware Breach2026-05-18
HighBreachTokee: 1.2M User Profiles Exposed via Unsecured MongoDB2026-05-18
HighBreachSamuel Shay: Handala Claims Breach of Israeli Normalization Architect2026-05-18
CriticalCVE · KEVCVE-2024-3400: Critical Command Injection in Palo Alto Networks PAN-OS GlobalProtect2026-05-17
CriticalCVE · KEVCVE-2026-20133: Cisco Catalyst SD-WAN Manager Leaks Sensitive Information to Remote Attackers2026-05-17
CriticalCVE · KEVCVE-2025-48700: Zimbra Classic UI XSS Exploited in the Wild2026-05-17
CriticalCVE · KEVCVE-2024-1708: ConnectWise ScreenConnect Path Traversal Enables Remote Code Execution2026-05-17
CriticalCVE · KEVCVE-2026-35616: Critical Unauthenticated RCE in Fortinet FortiClient EMS2026-05-17
HighBreachAmerican Lending Center: 123,000 Individuals Exposed in Network Intrusion2026-05-17
HighRansomwareGrafana Labs: Source Code Theft and Ransom Refusal2026-05-17
CriticalCVE · KEVCVE-2026-0300: Critical PAN-OS Captive Portal RCE Under Active Exploitation2026-05-17
CriticalCVE · KEVCVE-2026-21385: Qualcomm Chipset Memory Corruption Flaw Added to CISA KEV2026-05-17
CriticalCVE · KEVCVE-2024-57726: SimpleHelp Privilege Escalation Flaw Hits CISA KEV with Known Ransomware Use2026-05-17
CriticalCVE · KEVCVE-2026-6973: Authenticated RCE in Ivanti Endpoint Manager Mobile2026-05-17
HighBreachAfrican National Congress: Black Axe Data Breach2026-05-17
CriticalCVE · KEVCVE-2023-21529: Microsoft Exchange Server Deserialization Flaw Exploited in Medusa Ransomware Campaigns2026-05-17
CriticalCVE · KEVCVE-2026-24512: ingress-nginx Path Injection Enables Cluster-Wide Secret Disclosure and RCE2026-05-17
CriticalCVE · KEVCVE-2026-20122: Cisco Catalyst SD-WAN Manager Privileged API Abuse Lets Read-Only Users Escalate to vManage2026-05-17
CriticalCVE · KEVCVE-2026-41940: cPanel & WHM Authentication Bypass Under Active Ransomware Exploitation2026-05-17
CriticalCVE · KEVCVE-2020-9715: Adobe Acrobat Use-After-Free Enables Code Execution2026-05-17
CriticalCVE · KEVCVE-2024-27199: JetBrains TeamCity Path Traversal Enables Limited Admin Actions2026-05-17
CriticalCVE · KEVCVE-2009-0238: Microsoft Excel Invalid Object Access Enables Remote Code Execution2026-05-17
CriticalCVE · KEVCVE-2026-34621: Adobe Acrobat and Reader Prototype Pollution Enables Arbitrary Code Execution2026-05-17
HighBreachMoroccan Government Platforms: Fexus Claims Massive govma Breach2026-05-17
CriticalCVE · KEVCVE-2012-1854: Microsoft VBA Insecure Library Loading Resurfaces on CISA KEV2026-05-17
CriticalCVE · KEVCVE-2026-3502: TrueConf Client Update Mechanism Lacks Integrity Verification2026-05-17
CriticalCVE · KEVCVE-2026-20128: Cisco Catalyst SD-WAN Manager Stores DCA Credentials in Recoverable Format2026-05-17
CriticalCVE · KEVCVE-2026-39987: Pre-Auth RCE in Marimo Python Notebook2026-05-17
CriticalCVE · KEVCVE-2026-21643: Critical SQL Injection in Fortinet FortiClient EMS2026-05-17
CriticalCVE · KEVCVE-2026-5281: Use-After-Free in Chrome's Dawn Graphics Layer Hits CISA KEV2026-05-17
CriticalCVE · KEVCVE-2026-42208: Unauthenticated SQL Injection in BerriAI LiteLLM Proxy2026-05-17
CriticalCVE · KEVCVE-2026-20182: Cisco Catalyst SD-WAN Authentication Bypass Hands Attackers Admin Control2026-05-17
CriticalCVE · KEVCVE-2025-29635: D-Link DIR-823X Command Injection Added to CISA KEV2026-05-17
HighBreachSenegal Public Treasury: Cyberattack and Data Extortion Threat2026-05-17
CriticalCVE · KEVCVE-2026-31431: Linux Kernel algif_aead Flaw Enables Local Privilege Escalation2026-05-17
CriticalCVE · KEVCVE-2024-57728: SimpleHelp Zip Slip Path Traversal Enables Remote Code Execution2026-05-17
CriticalCVE · KEVCVE-2026-32202: Windows Shell Spoofing Flaw Added to CISA KEV2026-05-17
CriticalCVE · KEVCVE-2023-27351: PaperCut NG/MF Authentication Bypass Added to CISA KEV2026-05-17
CriticalCVE · KEVCVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Enables Arbitrary File Write as SYSTEM2026-05-17
CriticalCVE · KEVCVE-2026-34197: Apache ActiveMQ Jolokia Code Injection Lands on CISA KEV2026-05-17
CriticalCVE · KEVCVE-2026-1340: Critical Code Injection in Ivanti Endpoint Manager Mobile2026-05-17
HighRansomwareUnited Quality Cooperative: INC Ransom Ransomware Attack2026-05-17
CriticalCVE · KEVCVE-2026-33825: Microsoft Defender Local Privilege Escalation Added to CISA KEV2026-05-17
CriticalCVE · KEVCVE-2026-32201: SharePoint Server Spoofing Flaw Added to CISA KEV2026-05-17
CriticalCVE · KEVCVE-2023-36424: Windows CLFS Driver Elevation of Privilege Flaw Added to CISA KEV2026-05-17
CriticalCVE · KEVCVE-2025-32975: Quest KACE SMA Authentication Bypass Enables Full Admin Takeover2026-05-17
CriticalCVE · KEVCVE-2025-60710: Windows Host Process Link-Following Flaw Exploited in the Wild2026-05-17
CriticalCVE · KEVCVE-2025-2749: Authenticated Path Traversal to RCE in Kentico Xperience2026-05-17
CriticalCVE · KEVCVE-2026-42897: Microsoft Exchange Server XSS Flaw Added to CISA KEV2026-05-17
HighBreachSamuel Shay: Handala Hackers Claim Breach of Abraham Accords Architect2026-05-17
CriticalCVE · KEVCVE-2026-22719: Unauthenticated Command Injection in VMware Aria Operations2026-05-17
HighBreachBono Juana Azurduy (Bolivia): Public Sector Data Leak by konata_izumi_shell2026-05-16
HighBreachFlorida Reliability Coordinating Council: Unauthorized File Copying Exposes SSNs2026-05-16
HighBreachFrance Titres: Massive State ID Database Breach2026-05-16
HighBreachAintree Hospital: Insider Snooping on Southport Attack Victims2026-05-16
HighBreachQantas: Third-Party Contact Centre Platform Breach2026-05-16
HighBreachNHS Aintree Hospital: Insider Snooping on Southport Attack Victims2026-05-16
HighBreachUS Tiger Securities: Ransomware Breach Exposes SSNs and Medical Data2026-05-16
HighBreachUS Gas Stations: Suspected Iranian Intrusion Into Fuel Tank Readers2026-05-16
HighRansomwareSpirit Medical Transport: Qilin Ransomware Attack2026-05-16
HighBreachOpexus: Insider Revenge Attack by Akhter Twins2026-05-16
HighBreachPierre et Vacances-Center Parcs: Platform Vulnerability Exploited2026-05-16
HighBreachComcast: $117M Settlement Over Confirmed Customer Data Breach2026-05-16
HighRansomwareYork City, PA: July 2025 Ransomware Attack2026-05-15
HighBreachBritish Airways: Infrastructure Destruction Squad Claims Breach2026-05-15
HighBreachOpenLoop Health: Telehealth Breach Exposes 716,000 Patients2026-05-15
HighBreachOpenAI: Mini Shai-Hulud npm Supply Chain Worm2026-05-15
HighBreachMistral AI: TeamPCP Supply Chain Breach2026-05-15
HighBreachAbrigo: ShinyHunters Pay or Leak Extortion2026-05-15
HighBreachExcelas: Cl0p Ransomware Breach Exposes Medical Records2026-05-15
HighRansomwareBluize: Qilin Ransomware Claim2026-05-15
HighBreachRockstar Games: ShinyHunters Snowflake Token Abuse2026-05-14
HighRansomwareAhmed Al-Kadi Private Hospital: Ransomware Breach Encrypts Portions of IT Environment2026-05-13
HighRansomwareEarth Systems: INC Ransom Claims 600GB Breach2026-05-13
HighBreachPACI Kuwait: Alleged State Level Infrastructure Breach2026-05-13
HighBreachThales Group: Alleged Data Leak Tied to LuxTrust Identity Infrastructure2026-05-13
HighBreachChevin Fleet Solutions: FleetWave SaaS Breach Exposes Customer Data2026-05-13
HighBreachLockheed Martin: APT Iran Data Exfiltration2026-05-13
HighRansomwareWest Pharmaceutical Services: Ransomware Attack Disrupts Global Manufacturing2026-05-13
HighBreachCheckmarx: TeamPCP Jenkins Plugin Supply Chain Attack2026-05-12
HighRansomwareFoxconn: Nitrogen Ransomware 8TB Data Theft2026-05-12
HighBreachEnterprise Cloud Environments: FulcrumSec Extortion Campaign2026-05-12
HighBreachHong Kong Canvas Users: ShinyHunters Data Breach2026-05-12
HighBreachCanvas LMS: ShinyHunters Global Breach2026-05-11
HighRansomwareUnoaerre: Ransomware Attack Halts Italian Jewelry Manufacturing2026-05-11
HighBreachEgypt Ministry of Civil Aviation: Alleged Dark Web Breach2026-05-11
HighBreachIndian Customs Department: Insider Data Theft to China-Based Firms2026-05-11
HighBreachAerospace and Drone Operators: HeartlessSoul Espionage Campaign2026-05-11
HighBreachMedtronic: ShinyHunters Steals 9 Million Records2026-05-11
HighRansomwareVP Brands International: LockBit 5.0 Ransomware Breach2026-05-11
HighBreachSFR: Alleged Dark Web Data Breach Claim2026-05-11
HighRansomwareAMS Group: Stormous Ransomware 33GB Data Dump2026-05-11
HighBreachVodafone: Lapsus$ Source Code Leak2026-05-11
HighBreachMaryland University: Exfil-Ware Ransomware Breach2026-05-11
HighRansomwareTDS Telecommunications: TheGentlemen Ransomware Attack2026-05-11
HighBreachCoupang Taiwan: 33.7 Million Account Data Breach2026-05-10
HighRansomwareMinidoka Memorial Hospital: Blackwater Ransomware Attack2026-05-10
HighRansomwareServeis Mèdics Penedès: SafePay Ransomware 48-Hour Extortion2026-05-10
HighBreachCanada Goose: ShinyHunters Historical Data Leak2026-05-09
HighBreachZara: ShinyHunters Third-Party Breach2026-05-09
HighRansomwareUS Healthcare and Middle East Org: Lazarus Group Medusa Ransomware2026-05-09
HighBreachUS Federal Agencies: Insider Threat Database Destruction2026-05-09
HighBreachCarGurus: ShinyHunters Voice Phishing Breach2026-05-09
HighBreachUS Federal Agencies: Insider Threat Database Destruction2026-05-09
HighBreachMexican Water Utility: Claude AI Abused in OT Compromise Attempt2026-05-09
HighBreachUS Federal Agencies: Insider Database Destruction by Terminated Contractors2026-05-09
HighRansomwareNostrum Corporation: The Gentlemen Ransomware Attack2026-05-08
HighBreachGovernment Agencies: UAT-8302 China-Linked Espionage Campaign2026-05-08
HighBreachCanadian Government: $8.7M Settlement Over 2020 CRA Account Breach2026-05-08
HighRansomwareUniversity of Pennsylvania: ShinyHunters Canvas Ransom Attack2026-05-08
HighBreachANTS (France Titres): Teen Hacker Breaches National ID Agency2026-05-08
HighBreachFlemish Universities and VUB: ShinyHunters Canvas Breach2026-05-08
HighRansomwareChange Healthcare: BlackCat Ransomware Attack2026-05-08
HighRansomwareLiberty Mutual: Everest Ransomware Leak2026-05-07
HighBreachFinland's Valtori: Suspected State Espionage Breach2026-05-07
HighRansomwareExpeditor Systems: Incransom Ransomware Attack2026-05-07
HighBreachVercel: ShinyHunters OAuth Token Supply Chain Attack2026-05-07
HighRansomwareTTT Corporation: Stormous Ransomware 5TB Data Theft2026-05-07
HighBreachWoflow: ShinyHunters Leak Exposes 447,600 Accounts2026-05-07
HighRansomwareEnergy Action: SafePay Ransomware Breach2026-05-07
HighRansomwareSandhills Medical Foundation: Ransomware Attack2026-05-07
HighBreachOman Government Ministries: Iranian-Nexus Webshell Intrusion2026-05-06
HighBreachINSS: Handala Multi-Year Breach2026-05-06
HighBreachDigiCert: Screensaver Phish Yields EV Code Signing Certificates2026-05-06
HighBreachSterling Bank: ByteToBreach Data Breach2026-05-06
HighRansomwareRussian Government: Karakurt Ransomware Gang Insider Access2026-05-06
HighBreachCity of Suffolk, Virginia: Cloak Ransomware Data Breach2026-05-05
HighRansomwareArdmore Police Department: Phishing-Triggered Ransomware Attack2026-05-05
HighBreachRhode Island RIBridges: Brain Cipher Ransomware Settlement2026-05-05
HighRansomwareMediaworks: World Leaks Ransomware Breach2026-05-05
HighRansomwareFrost Bank: Everest Ransomware Vendor Breach2026-05-05
HighBreachCanvas LMS: ShinyHunters Claims 3.65TB Breach Affecting 275M Users2026-05-04
HighBreachTriZetto Provider Solutions: Web Portal Breach Exposes 3.4M Patients2026-05-04
HighBreachConduent Business Services: Ransomware Breach of 25M Americans2026-05-04
HighBreachLotte Card: 2.97M Customer Data Breach2026-05-04
HighBreachPrime Properties: M3rx Ransomware Darknet Leak2026-05-04
HighBreachNVIDIA GeForce NOW: ShinyHunters Claims Millions of User Records Stolen2026-05-04
HighBreachCapita: Civil Service Pension Data Exposure2026-05-04
HighBreachCapital One: $425M Settlement Approved for 2019 Cloud Breach2026-05-04
HighRansomwareCushman & Wakefield: ShinyHunters Ransomware Attack2026-05-04
HighBreachAlberta Residents: Centurion Project Data Exposure2026-05-04
HighBreachSistemi Informativi: Salt Typhoon Espionage Breach2026-05-04
HighBreachMoneyForward: GitHub Credential Compromise2026-05-04
HighBreachUS Navy: Handala Claims Personnel Data Breach2026-05-03
HighBreachEuropean Commission: ShinyHunters Cloud Data Breach2026-05-03
HighBreachANTS (France Titres): Teen Hacker Breaches National ID Agency2026-05-03
HighBreachNepal Public Procurement System: Insider Bid-Rigging Hack Ring2026-05-03
HighBreachTrellix: Source Code Repository Breach2026-05-03
HighRansomwareWyoming County Government: ThreeAM Ransomware Attack2026-05-03
HighRansomwareOrange: Babuk Ransomware Breach Claim2026-05-03
CriticalCVEcPanel Servers: Sorry Ransomware Mass Exploitation2026-05-03
HighBreachInstructure: Canvas LMS Maker Discloses Cyber Incident2026-05-03
HighBreachPakistan Government and Military: Alleged 39GB Dark Web Leak2026-05-02
HighBreachMcGraw-Hill: ShinyHunters Salesforce Breach2026-05-02
HighRansomwareFollett Software LLC: ShinyHunters Ransomware Leak Listing2026-05-02
HighBreachMST (Sanko Makina/ASKO Holding): Blacknevas 7-Month Cyber Siege2026-05-02
HighBreachAman: ShinyHunters Pay or Leak Extortion2026-05-02
HighBreachCheckmarx KICS: Supply Chain Compromise via Trojanized Docker and IDE Extensions2026-05-02
HighBreachFrance Titres (ANTS): Teen Hacker Breaches State ID Agency2026-05-02
HighBreachMoldova CNAM: Mysterious Healthcare Database Breach2026-05-02
HighBreachCanonical: 313 Team DDoS and Extortion2026-05-02
HighBreachZenBusiness: ShinyHunters Extortion Breach2026-05-02
HighRansomwareAdams County, PA: Ransomware Attack Disrupts County Services2026-05-02
HighBreachChipSoft: Embargo Ransomware Breach2026-05-02
HighRansomwareKINAS Solicitors: BlackNevas Ransomware Breach2026-05-02
HighBreachPowerSchool: Teen Hacker Credential Theft Breach2026-05-02
HighBreachMedicare: Doctor Data Breach2026-05-02
HighBreachCanada Life: ShinyHunters Breach via Compromised Employee Account2026-05-02
HighRansomwareInteger Holdings: coinbasecartel Ransomware Breach2026-05-01
HighRansomwareGregory Jewellers: Kairos Ransomware Breach2026-05-01
HighRansomwareSandhills Medical Foundation: Inc Ransom Ransomware Breach2026-05-01
HighBreachCanadian Tire: 38.3 Million Customer Accounts Exposed in E-commerce Database Breach2026-05-01
HighRansomwarePrime Properties: M3rx Ransomware Breach2026-05-01
HighBreachSMSA Express: 1.2M Customer Shipment Records Listed for Sale by lulzintel2026-05-01
HighBreachPolymarket: xorcat Data Breach2026-04-30
HighBreachSAP: Mini Shai-Hulud npm Supply Chain Attack2026-04-30
HighBreachCuban Embassy DC: Chinese State-Linked Espionage Breach2026-04-30
HighRansomwareWinona County, Minnesota: Ransomware Data Leak After Refusal to Pay2026-04-30
HighBreachScattered Spider: Federal Charges Filed Against Teen Member Arrested in Finland2026-04-30
HighBreachLower Hutt City Council: Phishing Compromise Exposes Resident Data2026-04-30
HighBreachForeign Governments and Activists: I-Soon Contractor Leak2026-04-30
HighRansomwareIllinois and Texas Healthcare Providers: Insomnia Ransomware Breach2026-04-30
HighRansomwareUPSRTC: Third-Party Ransomware Attack Cripples Electronic Ticketing System2026-04-30
HighRansomwareCity of Ardmore, Oklahoma: Ransomware Attack Exposes Resident Data2026-04-29
HighRansomwareSTELIA Aerospace: Rhysida Ransomware Hits North American Systems2026-04-29
HighRansomwareSumac Inc.: Incransom Ransomware Attack2026-04-29
HighBreachVimeo: ShinyHunters Exfiltration via Anodot Supply Chain Breach2026-04-29
HighBreachUS DOJ: Silk Typhoon MSS Contractor Extradited2026-04-28
HighRansomwareSynmosa Biopharma: DragonForce Ransomware Breach2026-04-28
HighBreachU.S. Justice System: Chinese State Hacker Xu Zewei Extradited2026-04-28
HighRansomwareWm. Sopko & Sons Co.: DragonForce Ransomware Attack2026-04-28
HighBreachPitney Bowes: ShinyHunters Extortion Leak2026-04-28
HighRansomwareSelex Gruppo Commerciale: INC Ransom Ransomware Breach2026-04-28
HighBreachSilk Typhoon: Alleged MSS Contract Hacker Extradited to US2026-04-28
HighBreachFidelity: $1.25M Massachusetts Fine Over Customer Data Breach2026-04-28
HighBreachPine Bluff School District: Business Email Compromise Wire Fraud2026-04-28
HighRansomwareGelatissimo: DragonForce Ransomware Data Theft2026-04-28
HighBreachLee & Lee Country Club: Suspected North Korean State-Sponsored Breach2026-04-27
HighRansomware100+ Global Enterprises: Coinbase Cartel Infostealer Extortion Spree2026-04-27
HighBreachU.S. Universities: Hafnium MSS Operative Extradited2026-04-27
HighBreachGeneration Life: Third-Party Vendor Compromise2026-04-27
HighRansomwareHeinrichs Logistic: LockBit 5 Ransomware Listing2026-04-27
HighBreachItron: Internal Network Breach Disclosed in SEC 8-K Filing2026-04-27
HighBreachVodafone UK: LAPSUS$ Claims Internal Network Breach2026-04-27
HighBreachMarcus & Millichap: ShinyHunters Salesforce Extortion2026-04-27
HighRansomwareBELFOR Asia: INC Ransom Ransomware Listing2026-04-27
HighRansomwareMerlo.de: LockBit5 Ransomware Listing2026-04-26
HighBreachMedtronic: IT Systems Cybersecurity Breach Disclosed2026-04-26
HighRansomwareTruGreen: Incransom Ransomware Double Extortion2026-04-26
HighBreachSouthern Illinois Dermatology: Hacking Incident Exposes 160,312 Patients2026-04-26
HighBreachTransport Workers Union Local 100: Confirmed Data Breach Affecting Up to 100,000 Records2026-04-26
HighRansomwareBuckley Powder and Leistritz Turbine Technology: Qilin Ransomware Double Extortion2026-04-26
HighBreachBePrime: Admin Account Compromise via Missing MFA2026-04-26
HighBreachRetail and Hospitality: BlackFile Extortion Campaign2026-04-26
HighRansomwareNPK Fertilizer Sdn Bhd: Lamashtu Ransomware Attack2026-04-25
HighBreachSagent Pharmaceuticals: Worldleaks Network Intrusion Exposes SSNs2026-04-25
HighBreachLACOE: Tax Portal Breach and Employee Identity Theft2026-04-25
HighRansomwareFive U.S. Victim Organizations: Insider Leak to BlackCat/ALPHV Ransomware2026-04-25
HighBreachADT: ShinyHunters Vishing Breach2026-04-25
HighRansomwareAT&T Careers: Everest Ransomware Leak2026-04-25
HighRansomwareProgressive Propane: Qilin Ransomware Claims US Energy Sector Attack2026-04-25
HighBreachRansomware Victims: Insider Betrayal by BlackCat Negotiator2026-04-25
HighRansomwareStudio Più: LockBit 5.0 Ransomware Attack2026-04-25
HighBreachBitwarden CLI: Shai-Hulud Supply Chain Worm2026-04-25
HighBreachHarrison County, WV: Courthouse and Sheriff's Tax Office Cyber Incident2026-04-25
HighBreachRich Products: Third-Party Phishing Breach via First Advantage2026-04-24
HighRansomwareTeamsters Local 773: Incransom Ransomware Attack2026-04-24
HighRansomwareAptim: Coinbase Cartel Ransomware Attack2026-04-24
HighBreachAmeriprise Financial: Unauthorized Third-Party Data Access2026-04-24
HighRansomwareOrthopedicsNY: INC Ransom Attack Triggers $1.95M Penalty2026-04-24
HighBreachUdemy: ShinyHunters Claims 1.4M Record Breach2026-04-24
HighBreachUniversal Pure: Six Week Network Intrusion Exposes SSNs and Medical Data2026-04-24
HighBreachFrench Institutions: HexDex Data Leak Campaign2026-04-24
HighRansomwareManulife Wealth: Qilin Ransomware Claim2026-04-24
HighBreachFrench Government Agency: 19 Million Records Allegedly Stolen in Data Breach2026-04-24
HighBreachFOSPIBAY: SQL Injection Breach Exposes Peruvian Citizen Records2026-04-24
HighBreachSri Lanka Finance Ministry: $3.7M Stolen in Payment Diversion Attack2026-04-24
HighBreachCarnival: ShinyHunters Breach Exposes 7.5M Loyalty Accounts2026-04-24
HighBreachANTS France: 19 Million Records Allegedly Stolen in Confirmed Breach2026-04-24
HighBreachEpe Municipality: Resident Data Theft from Council Server2026-04-24
HighRansomwareGenealogy SA: SafePay Ransomware Data Theft2026-04-23
HighRansomwareRusk County, Wisconsin: Qilin Ransomware Claim2026-04-23
HighBreachFrench Ministries: Hexdex Data Leaks2026-04-23
HighBreachRansomware Victims: Insider Betrayal by BlackCat Negotiator2026-04-23
HighRansomwareSamuel I. White, PC: Anubis Ransomware Attack2026-04-23
HighBreachFavelle Favco: SafePay Ransomware Data Leak2026-04-23
HighBreachDigitalMint: ALPHV/BlackCat Insider Collusion2026-04-23
HighBreachRituals: Customer Membership Database Breach2026-04-23
HighBreachUK Biobank: Researcher Insider Leak to Alibaba Marketplace2026-04-23
HighRansomwareHospital Caribbean Medical Center: The Gentlemen Ransomware Attack2026-04-23
HighRansomwareRheem Manufacturing: INC Ransom Ransomware Leak2026-04-22
HighBreachValtori: Suspected State Espionage Breach2026-04-22
HighRansomwareSprendlingen-Gensingen: Ransomware Attack Paralyzes Municipal Administration2026-04-22
HighRansomwareSTERIMED: Qilin Ransomware Leak Site Listing2026-04-22
HighRansomwareUniview Technologies: The Gentlemen Ransomware Listing2026-04-22
HighBreachAnthropic: Mythos AI Model Breached via Third-Party Vendor2026-04-22
HighRansomwareNordenta: Kairos Ransomware Cartel Targets Danish Dental Supplier2026-04-22
HighBreachBol: 400K Belgian Customer Records Allegedly Leaked2026-04-22
HighBreachUS Federal Networks: Credential Abuse by Instagram Braggart2026-04-22
HighRansomwareYamachi Electronics Philippines: INC Ransom Attack2026-04-22
HighBreachNSW Government: Insider Threat Data Breach2026-04-22
HighBreachPiazza San Marco: Infrastructure Destruction Squad Breaches Venice Flood Defenses2026-04-22
HighRansomwareAdaptavist Group: The Gentlemen Ransomware Breach2026-04-21
HighRansomwareViaQuest: Anubis Ransomware Breach2026-04-21
HighRansomwareEngie: coinbasecartel Ransomware Attack2026-04-21
HighRansomwareMinidoka Memorial Hospital: Blackwater Ransomware Attack2026-04-21
HighRansomwareChampion Homes: DragonForce Ransomware Leak Site Listing2026-04-21
HighBreachNSW Treasury: Insider Threat Data Exfiltration2026-04-21
HighRansomwareNutraBio: Everest Ransomware Claim2026-04-21
HighBreachNexus Grid: Cobalt Veil IoT Supply Chain Breach2026-04-21
HighBreachQantas: 6 Million Customer Accounts Exposed in Third-Party Call Centre Breach2026-04-20
HighRansomwareStrata Republic: Kairos Ransomware Breach2026-04-20
HighBreachMetro Pakistan: Alleged Breach by Threat Actor xklahadore2026-04-20
HighRansomwareComplete Aircraft Group: Everest Ransomware Claim2026-04-20
HighBreachChamphunt: Cricket Fan Platform Breached, 224K User Records for Sale2026-04-20
HighRansomwareCanada Life Assurance: ShinyHunters Ransomware Breach2026-04-20
HighRansomwareCitizens Bank: Everest Ransomware Listing2026-04-20
HighRansomwareAman Resorts: ShinyHunters Ransomware Attack2026-04-20
HighBreachCylance: 34M Record Database Offered for Sale on Dark Web2026-04-20
HighBreachSeiko USA: Website Defacement and Shopify Data Extortion2026-04-20
HighBreachIDMerit: Unsecured MongoDB Exposes 1 Billion Identity Records2026-04-20
HighBreachPolmed: ShinyHunters Ransomware Breach2026-04-20
HighBreachANTS (ants.gouv.fr): IDOR Flaw Exposes 19M French Identity Records2026-04-20
HighRansomware7-Eleven: ShinyHunters Claims Salesforce Breach2026-04-20
HighBreachLAUSD & Edgenuity: 4M Student Records Listed for Sale via Snowflake Breach2026-04-20
HighRansomwareSecuritevolfeu: CoinbaseCartel Ransomware Listing2026-04-19
HighBreachDarkForums: PwnForums Database Leak Exposes 44K Cybercriminal IPs2026-04-19
HighRansomwareMillennium Dental Technologies: Termite Ransomware Attack2026-04-19
HighBreachKelp DAO: $293M LayerZero Cross-Chain Bridge Exploit2026-04-19
HighRansomwareAltpro: Coinbasecartel Ransomware Attack2026-04-19
HighRansomwareHS Technology Group: Qilin Ransomware Attack2026-04-19
HighBreachCarnival Corporation: ShinyHunters Extortion Breach2026-04-19
HighBreachVercel: ShinyHunters Internal Systems Breach2026-04-19
HighRansomwarePharmathek: Akira Ransomware Listing2026-04-19
HighRansomwareNanometrics: Qilin Ransomware Claim2026-04-19
HighRansomwareSOGO Auction: RansomExx Ransomware Breach2026-04-19
HighBreachPowerSchool: Teen Hacker Sentenced for Historic Student Data Breach2026-04-19
HighRansomwareASTM Group: CoinbaseCartel Ransomware Claim2026-04-19
HighBreachHims & Hers Health: Social Engineering Breach Exposes Support Tickets2026-04-19
HighBreachConrad Capital Management: Unknown Third Party Intrusion Exposes SSNs and Financial Data2026-04-18
HighBreachTrivy Ecosystem: Vect Ransomware Supply Chain Extortion2026-04-18
HighRansomwareHBX Group: Qilin Ransomware Leak Site Listing2026-04-18
HighBreachTruView BSI: Background Check Firm Confirms 2024 Breach Exposing SSNs2026-04-18
HighBreachEuropa.eu: IAM Misconfiguration Breach by ShinyHunters2026-04-18
HighBreachPhoenix Art Museum: Unauthorized Network Intrusion Exposes SSNs2026-04-18
HighBreachEurail: Data Breach Exposes 300,000+ Travelers2026-04-18
HighRansomwaremedicalnetworks CJ GmbH: DragonForce Ransomware Breach2026-04-18
HighBreachAmtrak: ShinyHunters Salesforce Breach2026-04-18
HighBreachKemper Corporation: ShinyHunters Salesforce Leak2026-04-18
HighBreachLA County Office of Education: W-2 Vendor Breach Enables Tax Refund Fraud2026-04-18
HighBreachNational Supercomputing Center Tianjin: FlamingChina Data Theft2026-04-18
HighBreachMossad and Shin Bet: Handala Claims Intelligence Breach2026-04-17
HighBreachNigeria CAC: Corporate Registry Breach Triggers NITDA Probe2026-04-17
HighBreachPicBackMan: Cloud Backup Database Leak Exposes User Credentials2026-04-17
HighBreachTake-Two Interactive: ShinyHunters Snowflake Breach2026-04-17
HighRansomwareStockton Cardiology: GENESIS Ransomware Breach2026-04-17
HighBreachFrench Ministry of National Education: Student Data Exfiltration2026-04-17
HighBreachComcast Xfinity: Citrix Bleed Exploitation Reaches $117.5M Settlement2026-04-17
HighBreachBasic-Fit: 1 Million Members Exposed in European Data Breach2026-04-17
HighBreachAxios Supply Chain: North Korean UNC1069 Crypto Heist2026-04-17
HighBreachLongevity Health Plan: Confirmed Healthcare Data Breach2026-04-17
HighBreachHellenic National Defense General Staff: Russia-Linked Email Breach2026-04-17
HighRansomwareGruppo ICM SPA: Qilin Ransomware Attack2026-04-17
HighBreachHumana: Vendor Software Vulnerability Exposes Customer Data Across Six States2026-04-17
HighBreachGrinex: Suspected Western Intelligence Crypto Heist2026-04-17
HighBreachUkrainian Hospitals and Governments: UAC-0247 Data Theft Campaign2026-04-17
HighRansomwareCanada Goose: Coinbasecartel Ransomware Claim2026-04-17
HighBreachStandard Bank: 1.2TB Data Leak Exposes Credit Card Details2026-04-17
HighBreachOFPPT Morocco: 400K Student Records Leaked via MyWay Platform2026-04-16
HighBreachUkrainian Prosecutors: Fancy Bear Email Compromise Campaign2026-04-16
HighBreachKhyber Pakhtunkhwa Government: Admin Database Leak Exposes MD5 Credentials2026-04-16
HighBreachBanco BBVA: Customer Database Leaked by Threat Actor MAGO SPEAK2026-04-16
HighBreachChipsoft: Ransomware Attack Exposes Dutch Hospital Patient Data2026-04-16
HighBreachMcGraw-Hill: ShinyHunters Compromise Salesforce Platform, 45 Million Records Exposed2026-04-16
HighBreachChekin and Gastrodat: Massive Booking Data Theft Exposes 5 Million Hotel Guests2026-04-16
HighBreachRomanian Air Force: Russian-Linked Hackers Compromise 67 Email Accounts2026-04-16
HighBreachSignature Healthcare: Anubis Ransomware Attack Disrupts Hospital Operations2026-04-16
HighRansomwareAutovista: Ransomware Disrupts Automotive Data Services2026-04-16
HighRansomwareDencom New Zealand: Krybit Ransomware Breach2026-04-16
HighBreachRCI Hospitality: Cyberattack Exposes Corporate and Customer Records2026-04-16
HighBreachBooking.com: Millions of Customer Reservations Exposed in Storm-1865 Supply Chain Breach2026-04-16
HighBreachHallmark: ShinyHunters Dump 6.2M Customer Records After Failed Extortion2026-04-16
HighRansomwareCookeville Regional Medical Center: Rhysida Ransomware Attack Exposes 337K Patient Records2026-04-16
HighBreachMexican Government Agencies: AI-Powered Solo Breach Campaign2026-04-15
HighBreachRockstar Games: ShinyHunters Breach Exposes 78.6 Million Records via Snowflake2026-04-15
HighBreachIsraeli Unit 8200: Handala Hacker Group Claims Breach Exposing 80 Senior Officers2026-04-15
HighBreachPowerSchool: Gen Z Hacker Confirms $2.8M Extortion After Credential Breach2026-04-15
HighBreachNational Supercomputing Center Tianjin: Six-Month Silent Breach by FlamingChina2026-04-15
HighRansomwareEldorado Trading Group: DragonForce Ransomware Attack2026-04-15
HighBreachMercor AI — LiteLLM Supply Chain Attack Breach2026-04-05
HighBreachDrift Cryptocurrency Exchange — North Korea Social Engineering Attack2026-04-05
HighBreachFBI Surveillance System — China-Linked Breach Pen Register Data Exposure2026-04-05
HighBreachHong Kong Hospital Authority — Patient Data Breach2026-04-05
HighRansomwareAdvanced Vehicle Assemblies — Nightspire Ransomware Attack2026-04-05
HighRansomwareShwapno Bangladesh Supermarket — Ransomware Attack Customer Data Breach2026-04-05
HighRansomwareUnited Finance Egypt — Ransomware Attack Financial Services Breach2026-04-05
HighRansomwareUffizi Gallery Florence — Medusalocker Ransomware Attack Cultural Heritage Institution2026-04-05
HighBreachHims & Hers Telehealth Platform — Customer Support System Breach2026-04-05
HighRansomwareGroupe SERAP — Akira Ransomware Attack Agricultural Equipment Manufacturer2026-04-05
HighBreachHasbro — Major Cyber Incident and Operational Disruption2026-04-05
HighRansomwareMinot Water Treatment Plant — Critical Infrastructure Ransomware Attack2026-04-05
HighBreachNacogdoches Memorial Hospital — Patient Data Breach2026-04-05
HighRansomwareCharles River Insurance — Akira Ransomware Attack Insurance Sector2026-04-05
HighRansomwareNissan Automotive — Everest Ransomware Third-Party Vendor Attack2026-04-04
HighBreachSUTEX Ltda Colombian Textile — DragonForce Ransomware Attack2026-04-04
HighBreachPSK Wind Technologies - Handala Iran-Linked Defense Contractor Breach2026-04-04
HighBreachFSSAI India Food Authority — Official Document Breach2026-04-04
HighBreachAsmar Schor & McKenna Construction Law Firm — DragonForce Ransomware Attack2026-04-04
HighBreachAdobe — Mr. Raccoon BPO Supply Chain Attack2026-04-04
HighBreachBunch Ltd. Canadian Constructor — DragonForce Ransomware Attack2026-04-04
HighBreachAnthropic Claude Code Source Code Leaked via npm Misconfiguration2026-04-04
HighRansomwareManage My Health New Zealand — Kazu Ransomware Healthcare Attack2026-04-04
HighBreachCisco & Salesforce — CRM Data Breach2026-04-03
HighBreachCorewell Health — 19,000 Patients' Medical and Personal Data Compromised in Michigan Hospital Network Breach2026-04-01
HighRansomwareUMMC Hit by Medusa Ransomware — $800K Demanded, 1TB of Patient and Employee Data Exfiltrated2026-04-01
HighBreachCareCloud — Confirmed Breach of Electronic Health Records System Exposes Patient Data Across Provider Network2026-04-01
HighBreachFeníe Energía — Unattributed Data Exfiltration, 1.7M Records2026-03-31
HighBreachTamir Pardo (Former Mossad Chief) — Handala Email Breach2026-03-31
HighBreachaxios npm Supply Chain Attack — Hijacked Maintainer Drops Multi-Platform RAT2026-03-31
HighRansomwareStats SA — XP95 Cyber-Extortion2026-03-30
HighRansomwareKyocera Document Solutions Europe & Polsat — ALP-001 Ransomware, 150GB Exfiltrated2026-03-30
HighBreachCastilla-La Mancha Education System — Organized Cybercrime Ring2026-03-29
HighRansomwareNamibia Airports Company — INC Ransomware Group Dumps 500GB of Critical Infrastructure Data2026-03-29
HighRansomwareCommonSpirit Health — Patient Data Exposed via Third-Tier Subcontractor Ransomware Attack2026-03-29
HighRansomwareRocky Mountain Care — Qilin Ransomware Hits Utah Senior Care Network2026-03-29
HighRansomwareSchlam Stone & Dolan LLP — Anubis Ransomware Targets U.S. Law Firm Representing Government and Fortune 500 Clients2026-03-29
HighRansomwareLacor.es and Polsat — ALP-001 Ransomware European Expansion2026-03-29
HighRansomwareARENCO Group & ITWAL — Dual Ransomware Claims Target Dubai Conglomerate and Canada's National Food Distribution Network2026-03-29
HighRansomwareTerix — ALP-001 Ransomware Hits U.S. Data Center Provider with $26.5M Demand2026-03-29
HighRansomwareWoodfords Family Services — Ransomware Attack on Disability Services Provider Yields Two-Year Notification Failure2026-03-29
HighRansomwareTPIS Industrial Services — Play Ransomware Hits U.S. Manufacturer2026-03-28
HighBreachDoctor Alliance — Credential Theft Exposes Patient Health Records Across Multiple Texas Home Healthcare Providers2026-03-28
HighBreachNova Scotia Power — Cyberattack Exposed 900,000 Utility Customers, Privacy Commissioner Forces Security Reform2026-03-28
HighBreachKash Patel — Iranian State-Linked Handala Breaches FBI Director's Personal Gmail, Publishes Authenticated Documents2026-03-28
HighRansomwareEsprinet — ALP-001 Ransomware Claims 1.2TB Breach of €4B European IT Distributor2026-03-28
HighRansomwareGoodwill Industries — Interlock Ransomware Hits Nonprofit Chain, 80GB Stolen, Stores Forced Cash-Only2026-03-28
HighBreachEuropean Commission — AWS Account Breach Exposes 350GB of EU Executive Data, Attacker Plans Public Leak2026-03-28
HighBreachHong Kong Correctional Services Department — IT System Breach Exposes 6,800 Employee Records2026-03-28
HighRansomwareGermany's Left Party — Qilin Ransomware Attack on Political Party Infrastructure2026-03-28
HighRansomwareCity of Meriden, Connecticut — Incransom Ransomware Group Claims Municipal Government Attack2026-03-28
HighRansomwareViva Ticket — Ransomware Hits Ticketing Platform Serving the Louvre and 3,500 Cultural Venues2026-03-28
HighBreachIntraCare — Healthcare Cyberattack Takes Systems Offline, 28 Surgeries Deferred2026-03-28
HighBreachAFC Ajax — API Flaws Exposed 300,000 Accounts and Enabled Hijack of 42,000 Season Tickets2026-03-28
HighBreachCentauro.net — 4.3 Million Customer Records Exposed in Data Breach2026-03-28
HighBreachLiteLLM — Malicious PyPI Packages Steal 300GB and 500K Credentials via AI Proxy Supply Chain2026-03-27
HighRansomwareSATS Sports Club — The Gentlemen Ransomware Claims Nordic Fitness Giant, 733K Members at Risk2026-03-27
HighBreachHightower Holding — Credential Compromise Exposes 131,000 Wealth Management Clients2026-03-27
HighRansomwareMonmouth University — PEAR Ransomware Group Claims 16TB Exfiltration2026-03-27
HighBreachCrunchyroll (Sony): Third-Party Vendor Malware, 100GB Exfiltration, $5M Extortion2026-03-26
HighRansomwarePort of Vigo (Spain): Ransomware Attack Disrupts Europe's Largest Fishing Port2026-03-26
HighBreachQualDerm Partners: Healthcare Data Breach, Millions of Patients Potentially Exposed2026-03-26
HighBreachCnous France: Data Breach Exposes 774,000 University Records2026-03-26
HighBreachNavia Benefit Solutions: Silent 24-Day Breach Exposes 2.7 Million Across Client Organizations2026-03-26
HighBreachAstraZeneca: Lapsus$ Claims 3GB Breach of Internal Code, Credentials, and Employee Data2026-03-26
HighRansomwareFoster City, California: Ransomware Attack Forces State of Emergency Declaration2026-03-26
HighRansomwareNike: Double-Extortion Ransomware Targeting IP2026-03-25
HighBreachCheckmarx: TeamPCP CI/CD Supply Chain Compromise via Stolen GitHub Credentials2026-03-25
HighBreachMazda: Vulnerability Exploitation in Warehouse Management System2026-03-25
HighBreachDutch Ministry of Finance: Unauthorized Access to Policy Department Systems2026-03-25
HighBreachKaplan: Server Intrusion Exposes SSNs and Driver's Licenses of 230,000+ Students and Professionals2026-03-24
HighBreachBMW & 35+ Automakers: IDOR Exploit Fuels Ongoing Multi-Brand Data Exfiltration2026-03-24
HighRansomwareSouth Africa Land Bank: RaaS Ransomware Attack via Internet-Facing Server Exploit2026-03-24
HighBreachCIRO: Phishing Attack Exposes 750,000 Canadian Investors2026-03-24
HighBreachChile's Ley del Lobby Platform: Government Lobbying Records Breach Exposes 8 Years of Political Intelligence2026-03-24
HighBreachLockheed Martin: Pro-Iran APT Claims 375TB Breach, Demands $400M Ransom2026-03-24
HighBreachTelekom Serbia: Data Breach Exposes 700,000 Customers via Secondary Application Attack2026-03-24
HighRansomwareBell Ambulance: Medusa Ransomware Exposes 238,000 Patients' Healthcare and Identity Data2026-03-24
HighBreachConduent: Covert Intrusion Exposes 25 Million Americans' Government Benefits Data2026-03-24
HighRansomwareSouthwire: Qilin Ransomware Group Claims Attack on Major US Electrical Infrastructure Supplier2026-03-23
HighRansomwareHikvision: ALP-001 Claims 199TB Breach of World's Largest Surveillance Manufacturer ⚠️ Unverified2026-03-23
HighBreachSoundCloud: ShinyHunters Extortion Gang Breaches 29.8 Million User Accounts2026-03-23
HighBreachTrivy Vulnerability Scanner Backdoored in Supply Chain Attack: 100M+ Download Tool Turned Credential Stealer2026-03-22
HighRansomwareUniversity of Mississippi Medical Center: Ransomware Forces Statewide Clinic Shutdown, EHR Systems Offline2026-03-22
HighRansomwareMarquis: Ransomware Attack Exposes 672K Banking Customers2026-03-19
HighBreachCGI Sverige / Sweden BankID: ByteToBreach Source Code and Credential Leak2026-03-19
HighRansomwareRoyal Bahrain Hospital: Payload Ransomware, 110GB Patient Data Exfiltration Claimed2026-03-19
HighRansomwareAkzoNobel: Anubis RaaS, 170GB Exfiltration from US Facility2026-03-19
HighBreachNavigate360 / P3 Global Intel: 8 Million Confidential Police Tips Compromised via Social Engineering2026-03-19
HighBreachAura: ShinyHunters Voice Phishing Attack, 900,000 Records Leaked2026-03-19
HighBreachUK Companies House: WebFiling Browser Exploit Exposes 5 Million Business Records2026-03-18
HighBreachSalesforce Experience Cloud: ShinyHunters Mass Extortion Campaign2026-03-18
HighRansomwareRuhnau Clarke & Biogel: Qilin Ransomware Double Extortion2026-03-18
HighBreachFrance FICOBA: Credential Theft Exposes 1.2M National Bank Records2026-03-18
HighBreachOdido: ShinyHunters Data Extortion Campaign2026-03-17
HighBreachFrance: Criminal Data Broker Mega-Aggregation Exposes 45M Citizens2026-03-17
HighBreachUK Biobank: Researcher Negligence Exposes Genetic and Medical Records of 500,000 Volunteers2026-03-16
HighBreachU.S. Critical Infrastructure: Seedworm (MuddyWater) Espionage Campaign with Novel Deno Backdoor2026-03-16
HighBreachCarGurus: ShinyHunters Breach Exposes 12.4 Million User Records2026-03-16
HighBreachStarbucks Employee Data Breach: 889 Accounts Compromised via Partner Central Phishing2026-03-15
HighBreachIDMerit: Unauthenticated MongoDB Exposes 1 Billion KYC Records2026-03-15
HighBreachFBI New York Field Office: Human Error Exposes Epstein Investigation Server to Foreign Hacker2026-03-15
HighBreachCognizant TriZetto: 11-Month Undetected Intrusion Exposes 3.4M Patient Records2026-03-15
HighBreachLoblaw Companies: Third-Party Threat Actor Breaches Canada's Largest Retailer2026-03-15
HighRansomwareDigitalMint Negotiator Charged: Ran Ransomware Attacks While Negotiating for Victims2026-03-14
HighBreachSocial Security Administration: DOGE Insider Data Exfiltration2026-03-13
HighBreachStryker: Iran-Linked Handala Wiper Attack2026-03-13
CriticalCVE · KEVCVE-2026-39092026-03-13
HighBreachTelus Digital: ShinyHunters Data Extortion2026-03-13
CriticalCVE · KEVCVE-2026-39102026-03-13
HighBreachSweden E-Government / CGI Sverige: National Codebase Leak2026-03-13
CriticalCVE · KEVCVE-2024-21762 FortiOS Out-of-Bound Write Vulnerability2026-03-10
CriticalCVE · KEVThreat Brief: CVE-2025-26399 SolarWinds Web Help Desk RCE2026-03-09
CriticalCVE · KEVCVE-2017-7921: Hikvision Improper Authentication Vulnerability2026-03-07
Showing 1888 of 1888
/intel/feed.xml