Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2026-04-20, CISA added CVE-2026-20122 (Cisco Catalyst SD-WAN Manger) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2026-20128 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-20, CISA added CVE-2024-27199 (JetBrains TeamCity) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2023-27351 (PaperCut NG/MF) to its Known Exploited Vulnerabilities (KEV) catalog .
According to BleepingComputer, ShinyHunters leaked data from 13.
On 2026-04-14, CISA added CVE-2026-32201 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
According to TechCrunch, Booking.
According to The Register, Basic-Fit, Europe's largest gym chain, confirmed data of around one million customers including bank details was stolen, from the system that records members' club visits .
On 2026-04-13, CISA added CVE-2026-21643 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-13, CISA added CVE-2025-60710 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-13, CISA added CVE-2023-21529 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
TEIN, Inc.
On 2026-04-08, CISA added CVE-2026-1340 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
Dutch healthcare IT vendor ChipSoft said it detected anomalies on April 7 that proved to be a ransomware attack, and forensics confirmed criminals stole patient personal data, including medical data, from some Dutch customers .
On 2026-04-06, CISA added CVE-2026-35616 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-30, CISA added CVE-2026-3055 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Daily Star, Shwapno parent company ACI Logistics filed a police report stating that computers at its headquarters were locked by ransomware on August 19, 2025 .
According to TechCrunch, healthcare technology company CareCloud confirmed hackers accessed one of its electronic health record stores in March 2026; according to BleepingComputer, it disclosed the incident in an SEC filing in March, noting an 8-hour platform disruption .
CERT-EU said the AWS account behind the European Commission's europa.
According to Digital Daily, Jinhaksa's job platform Catch announced that hackers attacked its website between the afternoon of March 20 and the morning of March 23, 2026, leaking some members' personal data .