zeroday

SonicWall SMA Zero-Days Let Attackers Turn One WebSocket Request Into Root Control

SonicWall SMA Secure Mobile Access appliances are again at the center of a zero-day storm, with chained flaws that let…

3 months ago

AI-Discovered Linux Kernel Zero-Day Enables Root Privilege Escalation

A researcher recently disclosed an AI-assisted Linux kernel zero-day vulnerability, tracked as CVE-2026-53264, which allows local privilege escalation to root…

3 months ago

Cisco Catalyst SD-WAN Manager Zero-Day Exploited to Gain Root Access via Malicious CSV Upload

Cisco Catalyst SD-WAN Manager instances are currently being targeted in a zero-day exploitation campaign that allows attackers to escalate their…

4 months ago

Microsoft Confirms RoguePlanet Zero-Day Exploit Targeting Defender

Microsoft has confirmed a newly disclosed zero-day vulnerability, tracked as CVE-2026-50656, affecting Microsoft Defender, following the public release of a…

4 months ago

Windows BitLocker 0-Day Flaw Enables Security Feature Bypass Attacks

Microsoft has disclosed a newly identified zero-day vulnerability in Windows BitLocker that could allow attackers to bypass one of the…

4 months ago

Check Point VPN Zero-Day Under Active Exploitation by Ransomware Operators

Check Point has disclosed active in-the-wild exploitation of a critical authentication bypass vulnerability, tracked as CVE-2026-50751, impacting Remote Access VPN…

4 months ago

Android Zero-Day Vulnerability Actively Exploited in Device Takeover Attacks

Google has disclosed a critical Android zero-day vulnerability that is reportedly being actively exploited in targeted attacks, raising serious concerns…

5 months ago

Microsoft Warns Against Public Release of Zero-Day Details Before Vendor Coordination

Microsoft has issued a strong warning to the cybersecurity community following a recent surge in publicly disclosed zero-day vulnerabilities without…

5 months ago

Hackers Abuse KnowledgeDeliver LMS Flaw to Install BLUEBEAM Web Shell

Hackers are actively exploiting a critical vulnerability in the KnowledgeDeliver Learning Management System (LMS) to deploy the BLUEBEAM web shell,…

5 months ago

New NGINX 0-Day RCE “nginx-poolslip” Threatens Millions of Servers

A newly discovered zero-day vulnerability in NGINX, dubbed “nginx-poolslip,” is raising serious concerns across the global cybersecurity community, as it…

5 months ago