Early warnings
Breaches, ransomware, malicious packages and vulnerabilities that newsrooms, vendors or regulators reported before a CVE existed, or without one. When a CVE came later, its row says which and how much earlier cve.now reported it.
- SZB-c7e59b0d46OpenAI reports 948 Linux kernel privilege escalation flaws found by AI pipelineOpenAI · Linux kernel
- SZB-4f5cab3822Zyxel patches zero-day exploited to hack nearly 1,000 GS1900 switchesZyxel · GS1900
- SZB-6be53914c8SonicWall says it will not patch two end-of-life GMS flaws, one rated CVSS 9.1SonicWall · Global Management System (GMS)
- SZB-f4b7ff866cPlerdy SEO Tracker reportedly used in APT29-linked iOS and Android watering hole campaignPlerdy SEO Tracker
- SZB-b785d96740Cyberattack reportedly wipes Beget cloud data and disrupts hundreds of sitesBeget · cloud hosting infrastructure
- SZB-76a2041c5eGoogle patches critical Android flaw CVE-2026-58868 allowing remote code executionGoogle · Android
- SZB-b191afc8dbWorkOS says attacker accessed contact records and customer communication summariesWorkOS · internal sales app
- SZB-6f72a161a5Xsolis reports phishing-linked breach affecting nine health systemsXsolis
- SZB-49acf98068Chainstack reports unauthorized access to parts of its infrastructureChainstack
- SZB-cd29ee2e79DreamHost says hackers accessed its systems and customer session data for three monthsDreamHost · File Manager
- SZB-626b3ee2d0CISA advisory reports SQL command flaws in Subnet Solutions PowerSYSTEM CenterSubnet Solutions · PowerSYSTEM Center
- SZB-61849a44e4OPSSHIELD says attacker hijacked cPGuard update channel to backdoor Linux serversOPSSHIELD · cPGuard
- SZB-1ac4bc8960Barracuda warns customers to patch two flaws enabling root command executionBarracuda · Web Security Gateway, WAF Control Center, Web Application Firewall
- SZB-f01d9b6350Frontline Education data breach reportedly affects over 1.3 million peopleFrontline Education
- SZB-9dcda68ffbESET reports Gorbag hackers exploit WinRAR flaw to deploy info-stealing malwareRARLAB · WinRAR
- SZB-b9ba4e436fSiemens IoT2050 Advanced flaw CVE-2026-58115 reportedly exploited in the wildSiemens · SIMATIC IoT2050 Advanced
- SZB-d80473442cAttackers reportedly target unpatched CryptoPayment Gateway plugin flaw CVE-2026-81648CryptoPayment Gateway · WordPress plugin
- SZB-dffcdbc311Germany says lawmakers' iPhones may have been hacked with spywareApple · iPhone
- SZB-b728804dc9Abrigo takes Sageworks risk app offline after irregular activityAbrigo · Sageworks
- SZB-7a8b5fe3b6Google says Videostrong backdoored Android TV boxes in 1.3M-device botnetVideostrong · Android TV set-top boxes
- SZB-c7aa11a23fBTCPay Server maintainer warns of hot wallet thefts on outdated instancesBTCPay Server
- SZB-9ad81aaa3bMicrosoft fixes bug that blocked Smart App Control activation after October updateMicrosoft · Windows 11 Smart App Control
- SZB-0bed561f10IBM discloses two critical Langflow flaws allowing unauthenticated code executionLangflow
- SZB-ca48ede9d9BleepingComputer reports over 1,000 exposed GitLab servers unpatched against an exploited RCE flawGitLab CI/CD
- SZB-3a668ff545DebugBear says DNS records were hijacked via its domain registrarDebugBear
- SZB-b401b3c6fdSynology NAS users reportedly targeted again by C3RB3R ransomwareSynology · NAS devices
- SZB-2a829245c5Alpine Linux reports attempted GitLab exploit and possible compromiseAlpine Linux · GitLab server (development infrastructure)
- SZB-0a64a5d1f9Drupal warns of critical Commerce Core access bypass exploited in the wildDrupal Commerce core
- SZB-2884815801Japan Airlines says Amadeus passenger system breach exposed about 92,000 customersAmadeus · Passenger Service System
- SZB-a4df36c045Northflank warns breach led to unauthorized use of customers' AI API keysNorthflank cloud hosting platform