// ALL EVENTS

All events

Every event we track, in rank order: verdict first, then the strongest and newest evidence. Open an event for what it is and what to do.

CONFIRMED

REPORTED

NO EVIDENCE

Only want the vendors you use? CHOOSE YOUR VENDORS →

WATCH EVENTS · SHOWING 1 TO 25 OF 39

◆ WATCH
Several Apple products: attackers can get in without a passwordNEW
COMPUTERS, PHONES AND BROWSERSLAST ATTACK REPORT NOV 4, 2026CVE-2024-27834
CONFIRMED: EXPLOITED
◆ WATCH
Microsoft Exchange Server Subscription Edition RTM: attackers can run their own codeNEW
EMAILLAST ATTACK REPORT NOV 10, 2026CVE-2026-118207
NOTHING CONFIRMED
◆ WATCH
Microsoft Windows 10 Version 1809: security flaw reported in attacks
COMPUTERS, PHONES AND BROWSERSLAST ATTACK REPORT OCT 22, 2026CVE-2022-21894
CONFIRMED: EXPLOITED
◆ WATCH
Zyxel GS1900-24E firmware: a memory flaw attackers can abuseNEW
ROUTERS, CAMERAS AND DEVICESLAST ATTACK REPORT NOV 8, 2026CVE-2026-107441
CONFIRMED: TALK
◆ WATCH
BerriAI LiteLLM: attackers can run their own codeNEW
AI TOOLSLAST ATTACK REPORT NOV 5, 2026CVE-2026-40217
NOTHING CONFIRMED
◆ WATCH
Gotenberg: attackers can run their own codeNEW
OTHER SOFTWARELAST ATTACK REPORT NOV 4, 2026CVE-2026-42589
NOTHING CONFIRMED
◆ WATCH
ICT Innovations ICTBroadcast: attackers can run their own codeNEW
OTHER SOFTWARELAST ATTACK REPORT NOV 4, 2026CVE-2025-2611
NOTHING CONFIRMED
◆ WATCH
Progress ShareFile Storage Zones Controller: attackers can run their own code
FILE TRANSFERLAST ATTACK REPORT OCT 22, 2026CVE-2026-2699
CONFIRMED: TRIED
◆ WATCH
Fortinet FortiNAC: attackers can read or change files
VPN, FIREWALL OR GATEWAYLAST ATTACK REPORT OCT 21, 2026CVE-2022-39952
CONFIRMED: TRIED
◆ WATCH
Citrix ADC and Citrix Gateway: attackers can hijack users' sessions
VPN, FIREWALL OR GATEWAYLAST ATTACK REPORT OCT 22, 2026CVE-2023-24488
CONFIRMED: TRIED
◆ WATCH
Fortra GoAnywhere MFT: attackers can get in without a password
FILE TRANSFERLAST ATTACK REPORT OCT 22, 2026CVE-2024-0204
CONFIRMED: TRIED
◆ WATCH
Siemens SIMATIC IoT2050 Advanced: attackers can run their own code
BUSINESS SOFTWARELAST ATTACK REPORT NOV 3, 2026CVE-2026-58115
CONFIRMED: TALK
◆ WATCH
Canonical Apport: attackers can read data they should not seeNEW
OTHER SOFTWARELAST ATTACK REPORT NOV 4, 2026CVE-2025-5054
NOTHING CONFIRMED
◆ WATCH
Linux: a memory flaw attackers can abuseNEW
COMPUTERS, PHONES AND BROWSERSLAST ATTACK REPORT NOV 4, 2026CVE-2022-2588
NOTHING CONFIRMED
◆ WATCH
Xorbitsai Xoscar: attackers can run their own codeNEW
OTHER SOFTWARELAST ATTACK REPORT NOV 4, 2026CVE-2026-49950
NOTHING CONFIRMED
◆ WATCH
TVT DVR TD-2104TS-CL: attackers can read data they should not see
ROUTERS, CAMERAS AND DEVICESLAST ATTACK REPORT OCT 22, 2026CVE-2024-7339
CONFIRMED: TRIED
◆ WATCH
Linksys E4200: attackers can run their own code
ROUTERS, CAMERAS AND DEVICESLAST ATTACK REPORT OCT 22, 2026CVE-2025-34037
CONFIRMED: TRIED
◆ WATCH
Strapi: attackers can read data they should not see
WEBSITE OR ONLINE STORELAST ATTACK REPORT OCT 7, 2026CVE-2023-22894
CONFIRMED: EXPLOITED
◆ WATCH
Linux: a memory flaw attackers can abuse
OTHER SOFTWARELAST ATTACK REPORT NOV 1, 2026CVE-2026-98432
CONFIRMED: TALK
◆ WATCH
TBK DVR-4104: attackers can run commands on itCHANGED
ROUTERS, CAMERAS AND DEVICESLAST ATTACK REPORT NOV 7, 2026CVE-2024-3721
CONFIRMED: TRIED
◆ WATCH
Vercel Next.js: attackers can gain admin rights
WEBSITE OR ONLINE STORELAST ATTACK REPORT OCT 21, 2026CVE-2025-29927
CONFIRMED: TRIED
◆ WATCH
GitLab: attackers can run their own codeCHANGED
DEVELOPER TOOLSLAST ATTACK REPORT NOV 2, 2026CVE-2026-110264
CONFIRMED: TALK
◆ WATCH
Parsec Automation TrackSYS: security flaw reported in attacks
BUSINESS SOFTWARELAST ATTACK REPORT OCT 21, 2026CVE-2024-6188
CONFIRMED: TRIED
◆ WATCH
Mlflow: attackers can get in without a password
DEVELOPER TOOLSLAST ATTACK REPORT OCT 22, 2026CVE-2026-2652
CONFIRMED: TRIED
◆ WATCH
CVE-2023-38646: attackers can run commands on it
OTHER SOFTWARELAST ATTACK REPORT OCT 22, 2026CVE-2023-38646
CONFIRMED: TRIED