zeroday

This section has all the newest information on zero-day vulnerabilities, such as exploits, patches, and security warnings that have just been found. Get information about new threats and how to protect yourself from them before they become public. Stay up to date on important security holes that could affect systems and software. Our coverage keeps you up to date on new zero-day threats and the steps you need to take to keep your digital assets safe.

Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet

Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single…

4 days ago

Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication

Attackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then…

4 days ago

Apple Fixes iOS Zero-Day Exploited in Sophisticated Targeted Attacks

Apple has released iOS 26.7.1 and iPadOS 26.7.1 to address CVE-2026-86950, a zero-day vulnerability in CoreGraphics that may have been…

3 weeks ago

Chinese APT Clones Legitimate Websites to Deliver Chrome and Windows Zero-Day Exploits

A third Chinese threat actor has been linked to phishing campaigns that cloned trusted websites and chained Chrome and Windows…

4 weeks ago

China-Linked Hackers Exploit Chrome and Windows Zero-Days in BlueMoon Attacks

Researcher has discovered a rapidly spreading exploit kit called BlueMoon, which combines vulnerabilities in the Chrome browser with a Windows…

1 month ago

Windows Defender ShieldCrash 0-Day Lets Attackers Read Arbitrary Files as SYSTEM

A newly published proof-of-concept (PoC) called ShieldCrash reveals an unpatched vulnerability in Microsoft Defender that allows a local attacker to…

1 month ago

Magento and Adobe Commerce StyleSmuggler 0-Day RCE Actively Exploited in Attacks

Security researchers have discovered an actively exploited, unauthenticated remote code execution vulnerability affecting installations of Magento Open Source and Adobe…

1 month ago

CrowdStrike Falcon Zero-Day Lets Attackers Escalate Privileges on Windows Systems

A recently released proof-of-concept, named FalconFlank, claims to reveal a local privilege escalation vulnerability in the CrowdStrike Falcon Sensor on…

1 month ago

Metasploit Adds Exploit for PaperCut MF/NG Zero-Day RCE Vulnerabilities

Rapid7's Metasploit Framework is set to add an exploit module targeting the actively exploited chain of vulnerabilities affecting PaperCut MF…

2 months ago

Cursor 0-Day Lets Attackers Execute Malicious Code by Opening a Repository

A recently disclosed security issue in Cursor IDE exposed a serious Windows binary-planting vulnerability that could allow malicious code to…

2 months ago