CriticalVulnerabilityMonitoringBackfillExploitedKEVEPSS 59%CVE-2023-21529· updated Nov 8
On 2026-04-13, CISA added CVE-2023-21529 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
729 results
On 2026-04-13, CISA added CVE-2023-21529 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
TEIN, Inc.
On 2026-04-08, CISA added CVE-2026-1340 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
Dutch healthcare IT vendor ChipSoft said it detected anomalies on April 7 that proved to be a ransomware attack, and forensics confirmed criminals stole patient personal data, including medical data, from some Dutch customers .
On 2026-04-06, CISA added CVE-2026-35616 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-30, CISA added CVE-2026-3055 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) catalog .
According to The Daily Star, Shwapno parent company ACI Logistics filed a police report stating that computers at its headquarters were locked by ransomware on August 19, 2025 .
According to TechCrunch, healthcare technology company CareCloud confirmed hackers accessed one of its electronic health record stores in March 2026; according to BleepingComputer, it disclosed the incident in an SEC filing in March, noting an 8-hour platform disruption .
CERT-EU said the AWS account behind the European Commission's europa.
According to Digital Daily, Jinhaksa's job platform Catch announced that hackers attacked its website between the afternoon of March 20 and the morning of March 23, 2026, leaking some members' personal data .
On 2026-03-19, CISA added CVE-2026-20131 (Cisco Secure Firewall Management Center (FMC)) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to GovInfoSecurity, US benefits administrator Navia Benefit Solutions reported a breach affecting 2.
A Nancy metropolitan museum said its online ticketing provider Vivaticket was hit by ransomware on March 2, 2026, encrypting hosted data and disabling online sales; if data was exfiltrated it would cover ticket-account names, contact details and purchase history, not bank data .
On 2026-03-18, CISA added CVE-2026-20963 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
i-Scream Media said it confirmed on March 8, 2026 that some members' personal data had leaked, reported it to KISA and the PIPC, and is still investigating when and how .
Stryker said a cyberattack on March 11 caused a global disruption to its Microsoft environment, affecting order processing, manufacturing and shipping .
Germany's consumer centres say online electronics retailer asgoodasnew was hit by a cyberattack that may affect data of about 1.
On 2026-03-09, CISA added CVE-2026-1603 (Ivanti Endpoint Manager (EPM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-09, CISA added CVE-2025-26399 (SolarWinds Web Help Desk) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-03-03, CISA added CVE-2026-22719 (Broadcom VMware Aria Operations) to its Known Exploited Vulnerabilities (KEV) Catalog .