Incident update · Verified incident evidenceIncident updated
Porter & Company LLC Data Breach
Confirmation status revised
Recent security developments.
What changed: affected versions, source guidance, known exploitation, and incident impact. Dates describe the evidence shown; a new update can concern an older event.
Incident update · Verified incident evidenceIncident updated
El Camino Health Data Security Incident
Incident date revised
Incident update · Verified incident evidenceIncident updated
BASS Medical Group Data Security Incident
Confirmation status revised · Discovery date revised
Incident update · Verified incident evidenceIncident updated
HumanEdge Data Security Incident
Confirmation status revised · Affected organizations revised
Incident update · Verified incident evidenceIncident updated
Malicious Extension in Cursor VS Code Extension Marketplace
Guidance updated
Incident update · Verified incident evidenceIncident updated
HCA Healthcare Data Breach
Incident acknowledged · Incident date revised · Discovery date revised · Disclosure date revised
Incident update · Verified incident evidenceIncident updated
Data Security Incident at Bangkok Bank Public Company Limited, New York Branch
Data access revised · Affected organizations revised
Incident update · Verified incident evidenceIncident updated
Binance Security Incident
Incident acknowledged · Incident category revised
Incident update · Verified incident evidenceIncident updated
Blanchard Training and Development Data Breach
Affected data revised
Incident update · Verified incident evidenceIncident updated
23andMe Data Breach
Data access revised · Affected organizations revised
Incident update · Verified incident evidenceIncident updated
NCH Corporation Data Breach
Confirmation status revised
Incident update · Verified incident evidenceIncident updated
Bromcom SSO Personal Data Breach
Data access revised · Disclosure date revised
Incident update · Verified incident evidenceIncident updated
Georgia Power Customer Data Breach
Incident acknowledged
Incident update · Verified incident evidenceIncident updated
City of McMinnville Data Breach
Affected data revised
Incident update · Verified incident evidenceIncident updated
Educational Testing Service (ETS) Incident
Affected organizations revised
Advisory change · CVEChange observed
CVE-2026-82976
Remediation updated
Advisory change · CVEChange observed
CVE-2026-114406
Affected products revised · Source references updated
Advisory change · CVEChange observed
CVE-2026-78410
Affected products revised · Source references updated
Advisory change · CVEChange observed
CVE-2026-78408
Affected products revised · Source references updated
Incident update · Verified incident evidenceIncident updated
Bennett College Data Breach
Incident date revised · Disclosure date revised
Incident update · Verified incident evidenceIncident updated
Harman Fitness Data Security Incident
Data access revised · Incident date revised · Affected organizations revised
Incident update · Verified incident evidenceIncident updated
Los Angeles City Attorney Data Breach
Incident date revised · Disclosure date revised
Incident update · Verified incident evidenceIncident updated
CB Financial Services, Inc. cybersecurity incident
Data access revised · Disclosure date revised · Affected organizations revised
Incident update · Verified incident evidenceIncident updated
ASOS US Sales LLC Data Breach
Guidance updated
Incident update · Verified incident evidenceIncident updated
See's Candies Data Breach
Incident acknowledged
Incident update · Verified incident evidenceIncident updated
Greenberg Traurig Data Breach
Incident acknowledged
Incident update · Verified incident evidenceIncident updated
Hibbett Retail, Inc. Security Incident
Data access revised
Incident update · Verified incident evidenceIncident updated
Del Monte Foods Corporation II Inc. Data Security Incident
Confirmation status revised · Data access revised · Disclosure date revised
Incident update · Verified incident evidenceIncident updated
Call-on-Doc Cybersecurity Incident
Incident date revised
Incident update · Verified incident evidenceIncident updated
Modoc Medical Center Data Breach
Affected organizations revised
Incident update · Verified incident evidenceIncident updated
Aesto Data Security Incident
Data access revised
Advisory change · CVEChange observed
CVE-2026-63622
Affected products revised
Advisory change · CVEChange observed
CVE-2026-62439
Affected products revised
Advisory change · CVEChange observed
CVE-2026-66758
Affected products revised
Advisory change · CVEChange observed
CVE-2026-59090
Affected products revised
Advisory change · CVEChange observed
CVE-2026-58384
Affected products revised
Advisory change · CVEChange observed
CVE-2026-58379
Affected products revised
Advisory change · CVEChange observed
CVE-2026-73198
Affected products revised
Advisory change · CVEChange observed
CVE-2026-73197
Affected products revised
Known exploitation · CISA KEVAdded to CISA KEV
The issue was addressed with improved checks.
CVE-2024-27834 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
CVE-2026-119977 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to…
CVE-2026-111357 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with…
CVE-2026-118527 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
CVE-2026-76418 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
Integer Overflow or Wraparound in GitLab
CVE-2026-97229 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
ESX insufficient logging vulnerability
CVE-2026-41709 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
net: skbuff: preserve shared-frag marker during coalescing
CVE-2026-46300 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
CVE-2026-111497 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
CVE-2026-48356 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Known exploitation · CISA KEVAdded to CISA KEV
RCE via OOM corruption
CVE-2026-109618 added to CISA's Known Exploited Vulnerabilities catalog. This is the catalog addition date, not the first attack date.
Recent retained advisory revisions, KEV additions, and incident updates. Bounded to 50 developments; earlier history and uncollected sources are not reconstructed.