Zero-Day

Hackers Exploit SonicWall SMA Zero-Days to Gain Root Access and Deploy ORANGETAIL Webshell

An ongoing exploitation of two zero-day vulnerabilities in SonicWall Secure Mobile Access (SMA) devices. These vulnerabilities allowed a threat actor,…

4 months ago

AnyDesk Zero-Day Flaw Allows Local Attackers to Trigger System-Wide Denial-of-Service

A newly disclosed zero-day vulnerability in AnyDesk has the potential to allow a local attacker to trigger a denial-of-service condition…

4 months ago

Cursor 0-Day Flaw Executes Malicious git.exe From Repositories Without User Interaction

Cursor users on Windows may be at risk of arbitrary code execution following Mindgard's disclosure of a zero-day vulnerability. This…

4 months ago

Cisco Catalyst SD-WAN Manager Zero-Day Exploited to Gain Root Access via Malicious CSV Upload

Cisco Catalyst SD-WAN Manager instances are currently being targeted in a zero-day exploitation campaign that allows attackers to escalate their…

4 months ago

Microsoft Confirms RoguePlanet Zero-Day Exploit Targeting Defender

Microsoft has confirmed a newly disclosed zero-day vulnerability, tracked as CVE-2026-50656, affecting Microsoft Defender, following the public release of a…

5 months ago

New Windows CTF 0-Day Vulnerability Lets Attackers Gain Elevated Privileges

Microsoft has disclosed a new zero-day vulnerability in the Windows Collaborative Translation Framework (CTFMON) that could allow attackers to gain…

5 months ago

Windows BitLocker 0-Day Flaw Enables Security Feature Bypass Attacks

Microsoft has disclosed a newly identified zero-day vulnerability in Windows BitLocker that could allow attackers to bypass one of the…

5 months ago

Windows Defender Zero-Day “RoguePlanet” Lets Attackers Gain SYSTEM Privileges

A newly disclosed zero-day vulnerability dubbed “RoguePlanet” is affecting Microsoft Defender, allowing attackers to escalate privileges and obtain full SYSTEM-level…

5 months ago

Check Point VPN Zero-Day Under Active Exploitation by Ransomware Operators

Check Point has disclosed active in-the-wild exploitation of a critical authentication bypass vulnerability, tracked as CVE-2026-50751, impacting Remote Access VPN…

5 months ago

Android Zero-Day Vulnerability Actively Exploited in Device Takeover Attacks

Google has disclosed a critical Android zero-day vulnerability that is reportedly being actively exploited in targeted attacks, raising serious concerns…

5 months ago