Zero-Day

Cybersecurity 4 min A Chinese-Linked Group Exploited a BeyondTrust Zero-Day From August, Mandiant Says The flaw in Remote Support appliances gave attackers root and the stored credentials. Exposed appliances shoul... PR Priya Nair 17 Oct Cybersecurity 4 min Palo Alto Patches a Firewall Flaw Already Used in Attacks, the Third Exploited PAN-OS Bug This Year An attacker with admin credentials can run code as root through the management interface. CISA gave US agencie... KE Kenji Tanaka 16 Oct Cybersecurity 5 min Attackers Chained Three Ivanti VPN Flaws to Get Root, and One Is Still Unpatched Volexity traced break-ins on fully patched Connect Secure gateways back to 3 October. The attackers patched co... KE Kenji Tanaka 14 Oct Cybersecurity 4 min Microsoft Patched a Record 1,411 Flaws in October and Suggested a New Way to Sort Them One Windows Shell bug was already being exploited. On the same day, Microsoft proposed grouping vulnerabilitie... KE Kenji Tanaka 14 Oct Cybersecurity 4 min Attackers Are Exploiting AhsayCBS Backup Servers, and the Latest Version Is Not Safe Huntress saw attackers chain two AhsayCBS flaws to plant webshells and a cryptominer. Version 10.3.4, named as... PR Priya Nair 12 Oct Cybersecurity 5 min A Third Citrix NetScaler Flaw Hit Appliances That Had Installed Last Week's Emergency Fix CVE-2026-88779 affects boxes that use SAML sign-in. Citrix calls it a crash; a researcher found malware runnin... KE Kenji Tanaka 5 Oct Cybersecurity 4 min An AI Agent Hacked a Dutch Security Volunteer Group. One of the Flaws It Used Has No Fix. DIVD, which warns others about software holes, says an agent chained two unknown Zammad helpdesk flaws to reac... KE Kenji Tanaka 3 Oct Cybersecurity 4 min Fortinet's Email Gateway Is Under Attack, and No Fixed Version Is Out Yet A critical FortiMail flaw lets anyone who can reach it over the network write files and run code. Until update... KE Kenji Tanaka 2 Oct Cybersecurity 3 min Cisco Found an Exploited SD-WAN Flaw While Handling a Customer's Support Case CVE-2026-76504 lets an attacker with no password use Catalyst SD-WAN Manager's API as the administrator. It wa... KE Kenji Tanaka 1 Oct Cybersecurity 4 min Apple Patched an Exploited Flaw in iOS 26, Which Most iPhones Still Run The CoreGraphics bug was used against targeted people on versions before iOS 27. Nearly 80% of iPhones were st... KE Kenji Tanaka 30 Sep Cybersecurity 6 min A Crafted Email Is Enough to Get Root on Cisco's Secure Email Gateway A mail gateway reads every message a company receives. Cisco's can be taken over by one of them, and the flaw... KE Kenji Tanaka 16 Sep Cyber Threat Intel 6 min Chrome's Sixth Zero-Day of 2026, and Browser Zero-Days Keep Falling CVE-2026-85046 is a V8 type confusion patched in Chrome 152 with a CISA deadline of 18 September. Across all b... KE Kenji Tanaka 7 Sep Cybersecurity 6 min SonicWall SMA1000's July Fix Is the Build This Advisory Now Calls Vulnerable Two new zero-days are being chained on SMA1000 appliances, in the same two components as the June pair. The Ju... KE Kenji Tanaka 3 Sep Cybersecurity 7 min PaperCut Was Being Exploited for a Day Before It Had a CVE Number The 27 August advisory confirmed active exploitation while carrying no identifier, no severity score and no vu... PR Priya Nair 30 Aug Cybersecurity 9 min A Zero-Day in a Dashboard Tool Took Framework's Entire Customer List Framework and Tally were both breached on 3 August through a zero-day in Metabase, the business-intelligence t... KE Kenji Tanaka 9 Aug Cybersecurity 6 min Microsoft's Largest-Ever Patch Tuesday: 600-Plus Fixes, Two Live Zero-Days, and a Triage Problem Microsoft's July update fixed more than 600 CVEs — its biggest ever — including two zero-days already under at... CY Cyber Team 20 Jul Cybersecurity 8 min Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245: Netadmin-to-Root, Exploited for Months Before Disclosure Cisco disclosed CVE-2026-20245 on 5 June 2026, a high-severity command-injection flaw in Catalyst SD-WAN Manag... CY Cyber Team 2 Jul Cybersecurity 5 min Google’s June Android Patch Fixes a Zero-Day Under Targeted Exploitation Google’s June 2026 Android security bulletin includes CVE-2025-48595, a Framework vulnerability flagged for li... CY Cyber Team 6 Jun Cybersecurity 7 min LiteSpeed cPanel Plugin Zero-Day CVE-2026-48172: Maximum-Severity Root Escalation Under Active Exploitation CVE-2026-48172 in the LiteSpeed User-End cPanel Plugin carries a CVSS v4.0 score of 10.0 and was added to CISA... CY Cyber Team 2 Jun Cybersecurity 12 min Exchange Server Zero-Day CVE-2026-42897 — Crafted-Email XSS in OWA Exploited in the Wild Microsoft disclosed CVE-2026-42897 on 14 May 2026 — an XSS spoofing flaw in Exchange OWA exploited via crafted... CY Cyber Team 23 May Cybersecurity 8 min Cisco Patches Sixth SD-WAN Zero-Day of 2026 — UAT-8616 Attribution from Talos Cisco shipped an emergency advisory for CVE-2026-20182 on 15 May 2026, a peering authentication bypass in Cata... CY Cyber Team 18 May Cybersecurity 9 min Google Documents First Observed AI-Developed Zero-Day Exploit Tied to a Planned Mass-Exploitation Campaign Google's Threat Intelligence Group has described what it believes is the first case of an AI-developed zero-da... CY Cyber Team 18 May Cybersecurity 9 min Critical Palo Alto Firewall Zero-Day Actively Exploited by State-Sponsored Hackers — CISA Orders Patch by 9 May CVE-2026-0300, a critical PAN-OS buffer overflow enabling unauthenticated root-level RCE, is being actively ex... CY Cyber Team 8 May Cybersecurity 5 min Anthropic's Project Glasswing Found a 27-Year-Old Bug in OpenBSD — Before Hackers Could Anthropic's Project Glasswing used an unreleased frontier model to find thousands of high-severity vulnerabili... CY Cyber Team 5 May