Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
According to BleepingComputer, ShinyHunters leaked data from 13.
On 2026-04-14, CISA added CVE-2026-32201 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
According to TechCrunch, Booking.
According to The Register, Basic-Fit, Europe's largest gym chain, confirmed data of around one million customers including bank details was stolen, from the system that records members' club visits .
On 2026-04-13, CISA added CVE-2026-21643 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-13, CISA added CVE-2025-60710 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-13, CISA added CVE-2023-21529 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
TEIN, Inc.
On 2026-04-08, CISA added CVE-2026-1340 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
Dutch healthcare IT vendor ChipSoft said it detected anomalies on April 7 that proved to be a ransomware attack, and forensics confirmed criminals stole patient personal data, including medical data, from some Dutch customers .
On 2026-04-06, CISA added CVE-2026-35616 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-30, CISA added CVE-2026-3055 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Daily Star, Shwapno parent company ACI Logistics filed a police report stating that computers at its headquarters were locked by ransomware on August 19, 2025 .
According to TechCrunch, healthcare technology company CareCloud confirmed hackers accessed one of its electronic health record stores in March 2026; according to BleepingComputer, it disclosed the incident in an SEC filing in March, noting an 8-hour platform disruption .
CERT-EU said the AWS account behind the European Commission's europa.
According to Digital Daily, Jinhaksa's job platform Catch announced that hackers attacked its website between the afternoon of March 20 and the morning of March 23, 2026, leaking some members' personal data .
On 2026-03-19, CISA added CVE-2026-20131 (Cisco Secure Firewall Management Center (FMC)) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to GovInfoSecurity, US benefits administrator Navia Benefit Solutions reported a breach affecting 2.
A Nancy metropolitan museum said its online ticketing provider Vivaticket was hit by ransomware on March 2, 2026, encrypting hosted data and disabling online sales; if data was exfiltrated it would cover ticket-account names, contact details and purchase history, not bank data .
On 2026-03-18, CISA added CVE-2026-20963 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .