Latest additions to CISA's Known Exploited Vulnerabilities catalog. Select one for details.

The newest stories that name a CVE, from The Hacker News, BleepingComputer, SecurityWeek, Dark Reading, CISA, Undercode Testing and dAppLab. Select a CVE for its details.

See whether a password appears in known data breaches. It is checked in your browser: the password is never sent anywhere, only the first five characters of its SHA-1 hash go to Have I Been Pwned.

Organisations named by ransomware groups, as tracked by ransomware.live and ransomlook.io. A claim is the attackers' word, not proof of a breach. Links open those trackers, never a leak site.