Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

YearlyBest value · save 44%$999/year$83.25/mo, billed yearly. Save $789 vs monthly (5+ months free).Monthly$149/monthBilled monthly. Cancel anytime.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

Csx

Security incidents tagged Csx. Newest first.

1 Csx incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
1
Patched
1
Days without an incident
153
Longest quiet run: 143 days (May 30–Oct 19)
All tags →
Show 1 older incident

May 2026 1

  • MediumNo fix needed

    CSX vishing attack exposed SSNs and bank details of about 40,000 current and former employees

    Rail freight company CSX is notifying about 40,000 current and former employees that their personal data was exposed. An attacker gained access to CSX's Microsoft 365 environment after an employee responded to a vishing (voice phishing) call, and accessed and took files between May 29 and June 9 2026. The exposed data includes names, Social Security numbers, driver's license numbers and banking information. CSX also disclosed a separate April 2026 incident in which a third-party vendor may have disclosed data about current and former employees. CSX began mailing notification letters on Oct 20 2026, has notified law enforcement and is offering free credit monitoring and identity protection.

    CSX Microsoft 365 environment (employee records)Since May 29, 2026

Sponsored

Buy sponsor slot · $149/mo