Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 12 of 30. 100 incidents from 27 November 2023 to 22 April 2024.
22 April 2024
- T2 data breach: 94K accounts exposed High · Breach · Closed
18 April 2024
- Le Slip Français data breach: 1.5M accounts exposed Medium · Breach · Closed
12 April 2024
- Palo Alto Networks PAN-OS Command Injection Vulnerability (CVE-2024-3400) Critical · Patch now · Closed
- Giant Tiger data breach: 2.8M accounts exposed Medium · Breach · Closed
11 April 2024
- D-Link Multiple NAS Devices Command Injection Vulnerability (CVE-2024-3273) Critical · Patch now · Closed
- D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability (CVE-2024-3272) Critical · Patch now · Closed
10 April 2024
- Salvadoran Citizens data breach: 946K accounts exposed Medium · Breach · Closed
9 April 2024
- Kaspersky Club data breach: 55K accounts exposed High · Breach · Closed
8 April 2024
- boAt data breach: 7.5M accounts exposed Medium · Breach · Closed
4 April 2024
- Android Pixel Privilege Escalation Vulnerability (CVE-2024-29748) High · Patch now · Closed
- Android Pixel Information Disclosure Vulnerability (CVE-2024-29745) Medium · Patch now · Closed
2 April 2024
- SurveyLama data breach: 4.4M accounts exposed High · Breach · Closed
1 April 2024
- Pandabuy data breach: 1.3M accounts exposed Medium · Breach · Closed
31 March 2024
- Washington State Food Worker Card data breach: 1.6M accounts exposed Medium · Breach · Closed
29 March 2024
- England Cricket data breach: 43K accounts exposed High · Breach · Closed
28 March 2024
- Exvagos data breach: 2.1M accounts exposed High · Breach · Closed
27 March 2024
- GSM Hosting data breach: 2.6M accounts exposed High · Breach · Closed
26 March 2024
- Microsoft SharePoint Server Code Injection Vulnerability (CVE-2023-24955) High · Patch now · Closed
- SwordFantasy data breach: 2.7M accounts exposed High · Breach · Closed
25 March 2024
- Nice Linear eMerge E3-Series OS Command Injection Vulnerability (CVE-2019-7256) Critical · Patch now · Closed
- Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability (CVE-2021-44529) Critical · Patch now · Closed
- Fortinet FortiClient EMS SQL Injection Vulnerability (CVE-2023-48788) Critical · Patch now · Closed
22 March 2024
- MediaWorks data breach: 162K accounts exposed Medium · Breach · Closed
19 March 2024
- AT&T data breach: 49.1M accounts exposed Medium · Breach · Closed
13 March 2024
- ClickASnap data breach: 3.3M accounts exposed High · Breach · Closed
9 March 2024
- APK.TW data breach: 2.5M accounts exposed High · Breach · Closed
7 March 2024
- JetBrains TeamCity Authentication Bypass Vulnerability (CVE-2024-27198) Critical · Patch now · Closed
- Online Trade (Онлайн Трейд) data breach: 3.8M accounts exposed High · Breach · Closed
- WoTLabs data breach: 21K accounts exposed Medium · Breach · Closed
6 March 2024
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2024-23225) High · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2024-23296) High · Patch now · Closed
5 March 2024
- Sunhillo SureLine OS Command Injection Vulnerablity (CVE-2021-36380) Critical · Patch now · Closed
- Android Pixel Information Disclosure Vulnerability (CVE-2023-21237) Medium · Patch now · Closed
4 March 2024
- Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability (CVE-2024-21338) High · Patch now · Closed
3 March 2024
- Mr. Green Gaming data breach: 27K accounts exposed Medium · Breach · Closed
29 February 2024
- Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability (CVE-2023-29360) High · Patch now · Closed
28 February 2024
- Tangerine data breach: 243K accounts exposed High · Breach · Closed
- Cutout.Pro data breach: 20.0M accounts exposed High · Breach · Closed
22 February 2024
- ConnectWise ScreenConnect Authentication Bypass Vulnerability (CVE-2024-1709) Critical · Patch now · Closed
- Facebook Marketplace data breach: 77K accounts exposed High · Breach · Closed
15 February 2024
- Microsoft Exchange Server Privilege Escalation Vulnerability (CVE-2024-21410) Critical · Patch now · Closed
- Cisco ASA and FTD Information Disclosure Vulnerability (CVE-2020-3259) High · Patch now · Closed
13 February 2024
- Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability (CVE-2024-21412) High · Patch now · Closed
- Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-21351) High · Patch now · Closed
12 February 2024
- Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability (CVE-2023-43770) Medium · Patch now · Closed
9 February 2024
- Fortinet FortiOS Out-of-Bound Write Vulnerability (CVE-2024-21762) Critical · Patch now · Closed
6 February 2024
- Google Chromium V8 Type Confusion Vulnerability (CVE-2023-4762) High · Patch now · Closed
5 February 2024
- Spoutible data breach: 207K accounts exposed High · Breach · Closed
31 January 2024
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2022-48618) High · Patch now · Closed
- Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-21893) High · Patch now · Closed
27 January 2024
- MyPertamina data breach: 6.0M accounts exposed Medium · Breach · Closed
24 January 2024
- Atlassian Confluence Data Center and Server Template Injection Vulnerability (CVE-2023-22527) Critical · Patch now · Closed
23 January 2024
- Apple Multiple Products WebKit Type Confusion Vulnerability (CVE-2024-23222) High · Patch now · Closed
22 January 2024
- VMware vCenter Server Out-of-Bounds Write Vulnerability (CVE-2023-34048) Critical · Patch now · Closed
- Trello data breach: 15.1M accounts exposed Medium · Breach · Closed
18 January 2024
- Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability (CVE-2023-35082) Critical · Patch now · Closed
17 January 2024
- Google Chromium V8 Out-of-Bounds Memory Access Vulnerability (CVE-2024-0519) High · Patch now · Closed
- Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (CVE-2023-6549) High · Patch now · Closed
- Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability (CVE-2023-6548) High · Patch now · Closed
- Naz.API data breach: 70.8M accounts exposed High · Breach · Closed
16 January 2024
- Laravel Deserialization of Untrusted Data Vulnerability (CVE-2018-15133) High · Patch now · Closed
12 January 2024
- Hathway data breach: 4.7M accounts exposed High · Breach · Closed
10 January 2024
- Microsoft SharePoint Server Privilege Escalation Vulnerability (CVE-2023-29357) Critical · Patch now · Closed
- Ivanti Connect Secure and Policy Secure Command Injection Vulnerability (CVE-2024-21887) Critical · Patch now · Closed
- Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability (CVE-2023-46805) High · Patch now · Closed
8 January 2024
- D-Link DSL-2750B Devices Command Injection Vulnerability (CVE-2016-20017) Critical · Patch now · Closed
- Apache Superset Insecure Default Initialization of Resource Vulnerability (CVE-2023-27524) Critical · Patch now · Closed
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (CVE-2023-29300) Critical · Patch now · Closed
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (CVE-2023-38203) Critical · Patch now · Closed
- Apple Multiple Products Code Execution Vulnerability (CVE-2023-41990) High · Patch now · Closed
- Joomla! Improper Access Control Vulnerability (CVE-2023-23752) Medium · Patch now · Closed
4 January 2024
- Legendas.TV data breach: 3.9M accounts exposed High · Breach · Closed
2 January 2024
- Spreadsheet::ParseExcel Remote Code Execution Vulnerability (CVE-2023-7101) High · Patch now · Closed
- Google Chromium WebRTC Heap Buffer Overflow Vulnerability (CVE-2023-7024) High · Patch now · Closed
21 December 2023
- FXC AE1021, AE1021PE OS Command Injection Vulnerability (CVE-2023-49897) High · Patch now · Closed
- QNAP VioStor NVR OS Command Injection Vulnerability (CVE-2023-47565) High · Patch now · Closed
14 December 2023
- DC Health Link data breach: 48K accounts exposed High · Breach · Closed
12 December 2023
- InflateVids data breach: 13K accounts exposed High · Breach · Closed
11 December 2023
- Unitronics Vision PLC and HMI Insecure Default Password Vulnerability (CVE-2023-6448) Critical · Patch now · Closed
9 December 2023
- Gemplex data breach: 4.6M accounts exposed High · Breach · Closed
- Kaneva data breach: 3.9M accounts exposed High · Breach · Closed
8 December 2023
- Movie Forums data breach: 39K accounts exposed High · Breach · Closed
7 December 2023
- Qlik Sense HTTP Tunneling Vulnerability (CVE-2023-41265) Critical · Patch now · Closed
- JoyGames data breach: 4.5M accounts exposed High · Breach · Closed
- Qlik Sense Path Traversal Vulnerability (CVE-2023-41266) Medium · Patch now · Closed
5 December 2023
- Qualcomm Multiple Chipsets Integer Overflow Vulnerability (CVE-2023-33107) High · Patch now · Closed
- Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability (CVE-2023-33106) High · Patch now · Closed
- Qualcomm Multiple Chipsets Use-After-Free Vulnerability (CVE-2023-33063) High · Patch now · Closed
- Qualcomm Multiple Chipsets Use-After-Free Vulnerability (CVE-2022-22071) High · Patch now · Closed
- RailYatri data breach: 23.2M accounts exposed Medium · Breach · Closed
4 December 2023
- Apple Multiple Products WebKit Memory Corruption Vulnerability (CVE-2023-42917) High · Patch now · Closed
- Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability (CVE-2023-42916) Medium · Patch now · Closed
3 December 2023
- SoarGames data breach: 4.8M accounts exposed High · Breach · Closed
30 November 2023
- Google Skia Integer Overflow Vulnerability (CVE-2023-6345) Critical · Patch now · Closed
- ownCloud graphapi Information Disclosure Vulnerability (CVE-2023-49103) High · Patch now · Closed
- Go Ninja data breach: 5.0M accounts exposed High · Breach · Closed
29 November 2023
- Bleach Anime Forum data breach: 143K accounts exposed High · Breach · Closed
- Estante Virtual data breach: 5.4M accounts exposed High · Breach · Closed
27 November 2023
- Jam Tangan data breach: 434K accounts exposed High · Breach · Closed
- IndiHome data breach: 12.6M accounts exposed Medium · Breach · Closed