Daily record of disclosed breaches, exploited vulnerabilities, vendor advisories, takedowns and enforcement actions.
CVE-2024-3400, a command-injection flaw in PAN-OS GlobalProtect rated 10.0 by Palo Alto Networks, was patched on April 14, 2024 — and the vendor's own advisory says exploitation began within a day of the fix shipping.
Attackers don't need to crack your password if they can wear down your patience. Here's how push bombing works and the one setting that stops it cold.
A ransomware attack at Coca-Cola's Fairlife dairy subsidiary forced production downtime in July 2026 — the latest manufacturing extortion where the machine floor, not just the office, stops.
The payment-processing provider acknowledged a ransomware incident with system disruption, reported with a June 15, 2026 extortion deadline — the latest vendor compromise rippling to merchants.
The National Association of Insurance Commissioners reported unauthorized access discovered June 11 and disclosed June 17, 2026 — a notable compromise of insurance-regulation infrastructure.
After ShinyHunters set a May 12 ransom deadline and claimed a second intrusion, the U.S. Department of Education warned schools about the ongoing Canvas LMS incident.