Tags
1069 tags across 951 incidents, in 14 groups. Each tag has its own activity graph, streak, posts, and JSON + RSS feeds. Most incidents first; red is live.
Sponsored
Brought to you byTinkerer Club
The private club for people who own their servers, run their own AI, and pay $0/month for software.
Languages & runtimes 18
Frameworks, libraries & CMS 61
- WordPress612
- Magento26
- Next.js15
- React4
- Wordpress Plugin33
- Drupal23
- Craft CMS13
- Electron13
- Joomla3
- Image processing22
- Woocommerce22
- ImageMagick12
- Laravel12
- Rails12
- Sitecore2
- TanStack2
- Active Storage11
- Armeria11
- Avada11
- Better Auth11
- Brotli11
- Caddy11
- Certifi11
- Charmbracelet11
- Drupal Commerce11
- Echo11
- Expo11
- FastCGI11
- Ffmpeg11
- Flutter11
- FrankenPHP11
- GraphQL11
- imgproxy11
- Jackson11
- Jpeg Xl11
- Labstack11
- LINE11
- Nuxt11
- Pillow11
- Prestashop11
- sharp11
- Spring11
- Themefusion11
- Thrift11
- Wish11
- Wordpress Theme11
- Xstream11
- Freetype1
- glibc1
- jQuery1
- Kentico1
- libwebp1
- LottieFiles1
- PHPMailer1
- Rank Math1
- React Native1
- Storybook1
- Telerik1
- UpdraftPlus1
- XZ Utils1
- ZK Framework1
Package ecosystems & supply chain 22
Dev tools & CI 37
- Dev tools & CI1031
- GitHub922
- GitLab36
- VS Code35
- CI/CD15
- JetBrains14
- JFrog14
- Claude33
- Git23
- Jenkins13
- Artifactory3
- TeamCity3
- Claude Desktop22
- Cursor22
- OpenCode22
- Sandboxes22
- Gitea12
- Trivy12
- Atlantis11
- Gitee11
- Github App11
- Github Copilot11
- Iterm211
- Logging11
- Node Red11
- OpenTofu11
- Package Manager11
- Plausible11
- Postiz11
- Telemetry11
- Terraform11
- Visual Studio11
- Checkmarx1
- CircleCI1
- Kestra1
- Postman1
- Retool1
AI, data & databases 58
- AI / LLM tooling1431
- Anthropic1011
- AI agents1010
- Langflow17
- OpenAI35
- MCP34
- LiteLLM14
- Claude Code33
- Ai Found22
- Llm Inference22
- DeepSeek12
- Hugging Face12
- MLflow12
- MongoDB12
- Metabase2
- MinIO2
- Qlik2
- Ai Assisted Attack11
- Airbyte11
- Blockchain11
- ClickHouse11
- Data integration11
- Database11
- Desktop App11
- GPUStack11
- Internlm11
- JupyterLab11
- Kubeflow11
- Kv Cache11
- Lightning Ai11
- Llm11
- LM Studio11
- Lmdeploy11
- Local Ai11
- Malicious Model11
- Mariadb11
- mcp-go11
- ModelScope11
- Mysql11
- Openai Codex11
- Pgadmin11
- PingCAP11
- Postgres11
- Qwen11
- Rpc11
- Sglang11
- TiDB11
- X40211
- Xinference11
- Zhipu AI11
- Adminer1
- Flink1
- Grafana1
- HugeGraph1
- Ray1
- Snowflake1
- SQL Server1
- Superset1
Cloud, hosting & SaaS 60
- Cloud & hosting1523
- Cloudflare49
- AWS36
- Kubernetes45
- Okta35
- Vercel24
- CWP23
- Salesforce13
- Crm22
- Entra22
- GoDaddy22
- PaaS22
- Railway22
- SaaS22
- cPanel12
- Identity12
- Azure2
- 123 Reg11
- Ahsay11
- Alibaba Cloud11
- Amplitude11
- bunny.net11
- Certificate Authority11
- Chainstack11
- Debugbear11
- Device Registration11
- Digicert11
- Entra ID11
- Firecracker11
- Fleet11
- GMO11
- Hetzner11
- Identity Theft11
- Kyverno11
- Nextcloud11
- Northflank11
- Okta Access Gateway11
- Rancher11
- Skykick11
- Suse11
- Trigger.dev11
- Vinsolutions11
- Web Hosting11
- Workers Ai11
- Zeabur11
- ZITADEL11
- CyberPanel1
- Drift1
- Dropbox1
- ingress-nginx1
- JumpCloud1
- Mixpanel1
- Oracle Cloud1
- OVHcloud1
- ownCloud1
- PostHog1
- Salesloft1
- Twilio1
- Zapier1
- Zendesk1
Platforms, OS & devices 98
- Windows862
- Google540
- Linux1837
- Chrome433
- Apple332
- iOS332
- macOS431
- Android823
- WebKit19
- Safari8
- IoT37
- ICS/OT66
- Samsung16
- Red Hat34
- Arm4
- Arm Mali4
- Pixel4
- Telegram23
- Qualcomm3
- RARLAB (WinRAR)3
- APT22
- iPhone22
- Secure Boot22
- Security Bulletin22
- Ubuntu22
- Uefi22
- Firefox12
- Ledger12
- Mozilla12
- QNAP12
- AirDrop11
- Alpine11
- Alpine Linux11
- AO311
- Arch Linux11
- Archive Of Our Own11
- ARM6411
- Brave11
- Browser11
- Browser Extension11
- Calif11
- Cms11
- Contentdb11
- Debian11
- DSM11
- EDK II11
- Embedded11
- EPICS11
- Firmware11
- Gitbook11
- Hypervisor11
- Jailbreak11
- ksmbd11
- KVM11
- Lockdown Mode11
- Luanti11
- Minetest11
- Mobile11
- Mozilla Bugzilla11
- NGRAVE11
- No Code11
- Nonprofit11
- Open Source11
- OTW11
- PDF11
- Plex11
- PXE11
- Qubes Os11
- SCADA11
- Self Hosted11
- Synology11
- TeamViewer11
- Thunderbird11
- TianoCore11
- Trezor11
- Truenas11
- Virtualization11
- Xcp Ng11
- Xen11
- 1Password1
- 7-Zip1
- AMI1
- Authy1
- Dashlane1
- Discord1
- Flash Player1
- Google Authenticator1
- Internet Explorer1
- IOS XE1
- Kingsoft1
- Meta1
- Outlook1
- Signal1
- Sudo1
- TerraMaster1
- WhatsApp1
- WinRAR1
- WPS Office1
Network, protocols & servers 61
- Apache215
- SD-WAN311
- VPN59
- TLS67
- Firewall37
- Router16
- SSH35
- IP cameras15
- Remote access34
- OpenSSH24
- NAS23
- nginx3
- MITM22
- Network switch22
- Tailscale22
- WebSocket22
- API12
- CDN12
- DNS12
- Email Security12
- File transfer12
- HTTP/312
- Litespeed12
- ActiveMQ2
- NVR2
- Tomcat2
- Apache Arrow11
- Api Key Leak11
- BIND11
- Cdn Compromise11
- DDP11
- Email Gateway11
- Embedthis11
- Envoy11
- Freeswitch11
- Fusionpbx11
- GoAhead11
- Gs190011
- Headscale11
- Ipsec11
- Istio11
- Litespeed Cache11
- Mptcp11
- mTLS11
- Networking11
- Remote Access Trojan11
- Reverse proxy11
- Session Smart Router11
- Signalwire11
- Sip11
- SNMP11
- Voip11
- HTTP/21
- IETF1
- Nostromo1
- NTLM1
- Rejetto1
- Rejetto HFS1
- Remote support1
- SSL VPN1
- Telecom1
Network & security vendors 84
- Cisco636
- Fortinet424
- Ivanti119
- Citrix315
- SonicWall312
- NetScaler311
- D-Link110
- Palo Alto Networks29
- PAN-OS29
- Zyxel16
- Juniper25
- BeyondTrust15
- Cisco ASA15
- ConnectWise15
- TP-Link5
- WatchGuard24
- Sophos14
- eMudhra33
- Arista13
- CrowdStrike13
- FortiOS13
- ASUS3
- Check Point3
- Cisco FTD3
- DrayTek3
- F53
- Mitel3
- N-able3
- Sangoma3
- ScreenConnect3
- Barracuda12
- Dahua12
- FortiManager12
- Kaspersky12
- Array Networks2
- FreePBX2
- Ivanti EPM2
- NUUO2
- Reolink2
- Trend Micro2
- Aruba11
- ArubaOS11
- Bitdefender11
- DGS-313011
- Firebox11
- FortiAnalyzer11
- FortiAuthenticator11
- FortiGate11
- FortiMail11
- FortiSandbox11
- HPE11
- OpenSourceMalware11
- Pluto Security11
- SiteGuard11
- Sophos UTM11
- Stepsecurity11
- VeloCloud11
- Waf11
- Wiz11
- Wordfence11
- Aviatrix1
- Citrix Bleed1
- EDR1
- EPMM1
- Expedition1
- FortiClient1
- FXC1
- Ivanti Connect Secure1
- Ivanti CSA1
- Ivanti EPMM1
- Junos1
- Kemp LoadMaster1
- Libraesva1
- MikroTik1
- MobileIron1
- NX-OS1
- PTZOptics1
- Ruckus Wireless1
- SimpleHelp1
- SolarView1
- SonicOS1
- Unitronics1
- Versa1
- Wazuh1
Enterprise software 117
- Microsoft8100
- Adobe218
- Oracle217
- VMware215
- SharePoint12
- Zimbra11
- SolarWinds18
- Progress17
- ColdFusion7
- Microsoft 36546
- Broadcom26
- Atlassian16
- Roundcube6
- IBM35
- WebLogic5
- Confluence4
- Gladinet4
- SAP4
- vCenter4
- Keycloak33
- Veeam13
- CrushFTP3
- Fortra3
- Adobe Commerce22
- Siemens22
- SSO22
- ESXi12
- Commvault2
- Dassault Systèmes2
- Exchange2
- GeoServer2
- GoAnywhere2
- ManageEngine2
- OFBiz2
- OpenPLC2
- OSGeo2
- PaperCut2
- SmarterMail2
- Synacor2
- SysAid2
- Web Help Desk2
- Zoho2
- 2fa11
- Accenture11
- ArcGIS11
- Auth11
- AuthPoint11
- Backup11
- Checkmk11
- Collabora11
- Copeland11
- Dameware11
- Danfoss11
- Dixell11
- Esri11
- Foxit11
- Foxit Workspace11
- FreeRDP11
- Gina11
- INFINITT11
- Lft11
- Microsoft Authenticator11
- Microsoft Store11
- Microsoft Teams11
- Nomachine11
- OpenVox11
- Oracle E-Business Suite11
- Paint11
- Passkeys11
- Password Manager11
- PeopleSoft11
- Perforce11
- Puppet11
- Rdp11
- Remote Desktop11
- Sentinel Keys11
- Seppmail11
- Thales11
- Ucs Central11
- ULite11
- WS_FTP11
- Zammad11
- Acclaim Systems1
- Acronis1
- AOMEI1
- Bullhorn1
- Cacti1
- Cleo1
- Exchange Online1
- Ignite Realtime1
- Jira1
- Justice Av Solutions1
- LANSCOPE1
- Mirth Connect1
- MOVEit1
- NAKIVO1
- NetWeaver1
- Netwrix1
- NextGen Healthcare1
- Nice1
- Novi Survey1
- Oracle Agile PLM1
- Projectsend1
- PRTG1
- PTC1
- SAP Commerce1
- ScienceLogic1
- Serv-U1
- ServiceNow1
- SugarCRM1
- Sunhillo1
- Teclib1
- TeleMessage1
- TrueConf1
- WhatsUp Gold1
- Wing FTP1
- XWiki1
Attack & incident types 131
- CISA KEV27622
- RCE69247
- Ransomware4120
- Auth bypass3295
- Data breach5794
- Zero-day954
- Privilege escalation1736
- SQL injection1330
- Command injection1515
- Exploited1515
- Path Traversal913
- Extortion511
- Deserialization411
- XSS610
- Phishing510
- Account takeover99
- Infostealer19
- DoS88
- Third Party77
- API keys67
- Credential Theft66
- PII66
- Unauthenticated66
- Backdoor56
- Social engineering46
- Secrets16
- Key Compromise55
- Third Party Vendor55
- Outage45
- SSRF45
- Zero-click25
- End of life44
- SAML44
- Sandbox Escape44
- Use After Free44
- MFA34
- Worm14
- Espionage4
- Credential Rotation33
- File Upload33
- Hot Wallet33
- Payment cards33
- Unpatched33
- Cryptominer23
- OAuth23
- Vishing23
- Wiper23
- Session Hijacking13
- Spyware13
- Data Leak22
- Environment variables22
- Exchange Hack22
- Hardcoded credentials22
- Heap Overflow22
- Information Disclosure22
- Magecart22
- Memory Corruption22
- Password Hashes22
- Patch Bypass22
- Pre Auth22
- Public Exploit22
- Sabotage22
- ZDI22
- Have I Been Pwned12
- Malware12
- Misconfiguration12
- Actions11
- Actively Exploited11
- Aitm11
- Arbitrary File Write11
- Authz Bypass11
- Bootkit11
- Botnet11
- Brute Force11
- Buffer Overflow11
- Cache11
- Card Skimming11
- Container escape11
- Disinformation11
- Eip 770211
- Exploit Kit11
- Fake Job Interview11
- Flash Loan11
- Fraud11
- Frontend Compromise11
- Hardware Implant11
- IDOR11
- Incomplete Fix11
- Infinity Core11
- Integer Overflow11
- IPC11
- Local File Read11
- Malvertising11
- Medical imaging11
- OAuth211
- Password Leak11
- Password Reset11
- Payment Bypass11
- Payment Data11
- Pickle11
- Private keys11
- Prompt Injection11
- Proxy bypass11
- Redirect11
- Request Smuggling11
- Residential Proxy11
- Reverse Shell11
- Sdk11
- Seed Phrase Theft11
- Session Hijack11
- Skimmer11
- Smart Contract11
- Social login11
- Sri11
- TCC11
- Token Theft11
- Unauthorized Access11
- Vm Escape11
- Wallet addresses11
- Wallet drain11
- Watering Hole11
- Web Shell11
- Credential Stuffing1
- Data broker1
- DDoS1
- Password spraying1
- Registry Abuse1
- Smishing1
- Token Forgery1
- Wallet Drainer1
- Webshell1
Threat actors, campaigns & named bugs 47
- Shai-Hulud38
- Nation-state16
- ShinyHunters16
- North Korea15
- China5
- Cl0p5
- Scattered Spider3
- Darksword22
- Russia22
- APT2912
- Cerber12
- Qilin12
- Volt Typhoon12
- ALPHV2
- GlassWorm2
- LockBit2
- Apt4111
- Broccoli2shell11
- China-nexus11
- Coruna11
- CWPdoor11
- DDoSecrets11
- Dirty Frag11
- Ebury11
- Fragnesia11
- Hacktivism11
- Http2shell11
- Node2shell11
- Noname057 1611
- Tradertraitor11
- Z Pentest11
- APT281
- Brickstorm1
- CitrixBleed1
- Crimson Collective1
- DragonForce1
- Kinsing1
- Lazarus1
- Midnight Blizzard1
- MongoBleed1
- NSO Group1
- Pegasus1
- React2Shell1
- s1ngularity1
- SafePay1
- Salt Typhoon1
- ToolShell1
Affected companies & sectors 224
- Crypto2938
- E-commerce99
- Japan99
- Government88
- Healthcare56
- Banking44
- Education44
- Gaming44
- Retail44
- Coinbase24
- Artex33
- Belgium33
- Bitcoin33
- Chainalysis33
- Cyberattack33
- Defi33
- France33
- Refrigeration33
- Solana23
- Binance22
- Bnb Chain22
- Brazil22
- Bridge22
- Canada22
- Circle22
- Email22
- Energy22
- Ethereum22
- Fbi22
- Germany22
- Hardware Wallet22
- Identity Documents22
- India22
- Ireland22
- Switzerland22
- Tether22
- Ukraine22
- Norway12
- Aviation2
- Manufacturing2
- @cosme11
- Aave11
- AfD11
- Ahold Delhaize11
- Airline11
- Allium11
- Alternita11
- Amadeus11
- ANA11
- ANPD11
- Asiana Airlines11
- AU Small Finance Bank11
- Australia11
- Avalanche11
- B14g11
- Bank of America11
- Beget11
- Besu11
- Bithumb11
- Bitmart11
- Bitquery11
- Blockchain Data11
- Btcpay Server11
- Bubble11
- Bug Bounty11
- Capcom11
- Car Sharing11
- Cathedral11
- CBP11
- CERT-FR11
- Citi11
- CoinDCX11
- Cold Chain11
- Consensys11
- Convertr11
- Core Dao11
- Cox Automotive11
- Credit Mutuel Arkea11
- Credit Saison11
- Crime Stoppers11
- Cryptobilis11
- Csx11
- Czech Republic11
- Denmark11
- DHS11
- DreamHost11
- Elections11
- Electrum11
- Employment Permits11
- Engie11
- Everand11
- Fable11
- FEC11
- Fence Finance11
- FGC11
- Finance11
- Florida11
- Fod Financien11
- Food Retail11
- Frontline Central11
- Frontline Education11
- Game Launcher11
- Game Studio11
- Gnosis Pay11
- ICE11
- INCIBE11
- Iris Ohyama11
- Iris Plaza11
- ISP11
- istyle11
- Japan Airlines11
- Joshin11
- JPMorgan11
- K-1211
- Kamino11
- Kapibala11
- Keplr11
- Kernel Sh11
- Keystone11
- Kingdom Come Deliverance11
- Korean Air11
- Kyiv Independent11
- Law Firms11
- Level Infinite11
- Library11
- Litecoin11
- Maru-Jan11
- MatchPoint11
- Media11
- Mercado Bitcoin11
- MetaTrader11
- Morgan Stanley11
- Msecure11
- Mseven11
- Muji11
- Myminfin11
- Navigate36011
- Netherlands11
- New York11
- Newsletter11
- Nikke11
- Nikkei11
- Norad11
- NTT Docomo11
- OANDA11
- P311
- Park2411
- plala11
- Plerdy11
- Plunderswap11
- Polymarket11
- Predict.fun11
- QiAnXin11
- Queens Public Library11
- Quest Diagnostics11
- Radware11
- Revolve11
- Ripple11
- Ryohin Keikaku11
- School Health Management11
- Scribd11
- Shift Up11
- Shopify11
- Signal Talk11
- Singapore11
- Slideshare11
- So-net11
- Solflare11
- Sony11
- South Korea11
- Sports11
- Staking11
- State Bank of India11
- Sweden11
- Tax Agency11
- Teku11
- Times Car11
- Times Mobility11
- Tornado Cash11
- TPC Software11
- TRON11
- Uniswap11
- University of Copenhagen11
- Valinor Digital11
- Visa11
- Volg11
- Warhorse Studios11
- Warp11
- WARP PANDA11
- Web3Auth11
- Web3signer11
- Wells Fargo11
- Who Gives A Crap11
- Workos11
- XLab11
- Zilliqa11
- Zklink11
- Zklink Nova11
- 23andMe1
- Asahi1
- AT&T1
- Bybit1
- Caesars1
- Change Healthcare1
- Collins Aerospace1
- Comcast1
- Crunchbase1
- Ingram Micro1
- Instructure1
- Internet Archive1
- Jaguar Land Rover1
- LexisNexis1
- Marks & Spencer1
- MGM Resorts1
- National Public Data1
- North Grid1
- Qantas1
- RTX1
- Safe{Wallet}1
- Stryker1
- T-Mobile1
- Ticketmaster1
- UnitedHealth1
- Xfinity1
Other 51
- Cloud22
- Aurora11
- Avast11
- Avg11
- Babelfish11
- Bullmq11
- Canonical11
- Chartbrew11
- Cisa11
- Code Injection11
- Contact Form 711
- Container11
- CWP2Shell11
- Default Credentials11
- Deribit11
- Eop11
- File Read11
- Fly Io11
- Gen Digital11
- Host Escape11
- Hot Patch11
- Incus11
- Infatica11
- IRC11
- Jwt11
- Lxd11
- Memory Safety11
- Mfa Bypass11
- Multi Tenant11
- Nodejs11
- Open Identity Platform11
- OpenAM11
- Postgresql11
- Powersystem Center11
- Project Bypass11
- Rave Io11
- Secrets Exposure11
- Serializer11
- SignalPlus11
- Sqlite11
- Sslvpn11
- Ssm11
- Subnet11
- Symfony11
- Symlink11
- Tds11
- Tensorlake11
- Undici11
- UnrealIRCd11
- VulnCheck11
- White House11