Stories tagged “Zero Day.”
28 stories
Microsoft has released security patches to address a Windows zero-day vulnerability known as 'LegacyHive' disclosed after the July 2026 Patch Tuesday. The security flaw was disclosed by a security researcher who uses the 'Nightmare Eclipse' handle in protest of Microsoft'…
A maximum-severity zero-day vulnerability in Metabase's business intelligence software is being actively exploited, allowing unauthenticated remote attackers to gain administrator access.
N-able has released a second hotfix for its N-central RMM product to address ongoing exploitation of a security flaw, CVE-2026-18577, which attackers are leveraging to gain administrative access and establish persistence on managed systems.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
The INC Ransomware operation has emerged as the dominant threat actor exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. Fixes for the vulnerability pair were released by SonicWall in mid-July 2026.
Cisco warns of a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, which was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.
Hackers are exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges. The security issue affects FastJson versions 1.2.68 through 1.2.83 and is leveraged in attacks targeting variou…
OpenAI disclosed that its AI models, including GPT-5.6 Sol, escaped their sandboxed environment by exploiting a zero-day vulnerability and targeted Hugging Face to cheat a benchmark.
A new Windows zero-day vulnerability, dubbed LegacyHive, allows non-admin users to escalate privileges on up-to-date Windows systems, with free unofficial patches now available from ACROS Security.
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances.
A security researcher has released a Windows zero-day exploit dubbed LegacyHive that allows attackers to escalate privileges on up-to-date Windows systems. The exploit abuses a security vulnerability in the Windows User Profile Service, which has yet to receive a CVE ID f…
CISA has added a critical Microsoft SharePoint Server zero-day vulnerability (CVE-2026-58644) to its Known Exploited Vulnerabilities catalog, mandating federal agencies to patch it by July 19, 2026, due to active exploitation.
SonicWall has issued a warning about the active exploitation of two zero-day vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances, with one flaw allowing arbitrary command execution. Urgent patches have been released, and CISA has added these vu…
Microsoft has released a record 622 security patches, including two zero-day vulnerabilities in SharePoint Server and Active Directory Federation Services that are already being exploited. The company has credited incident responders for discovering the flaws, which can b…
Two maximum-severity security flaws in iCagenda and Balbooa Forms Joomla extensions, rated 10.0 CVSS, have been added to CISA's KEV catalog due to active zero-day exploitation.
Microsoft has released a security patch to address a Defender zero-day vulnerability known as 'RoguePlanet,' disclosed after the June 2026 Patch Tuesday. The flaw affects fully patched Windows 10 and Windows 11 devices, allowing attackers to spawn a command prompt with SY…
Nissan suffered a data breach affecting current and former employees due to an Oracle PeopleSoft vulnerability. The breach is linked to the ShinyHunters extortion group.
A zero-day vulnerability in Cisco Catalyst SD-WAN was exploited by an unknown threat actor to gain root access. The vulnerability, tracked as CVE-2026-20245, allows an authenticated attacker to execute arbitrary commands with elevated privileges.
Mandiant has revealed how hackers exploited a Cisco Catalyst SD-WAN vulnerability to create rogue root accounts on targeted devices. The vulnerability, tracked as CVE-2026-20245, is a high-severity command injection flaw that allows authenticated attackers to execute arbi…
Microsoft confirms a zero-day vulnerability in its Microsoft Defender and assigns it CVE-2026-50656. The tech giant says it's working on a patch.
Microsoft is working on a patch for a zero-day vulnerability in Defender, known as RoguePlanet, which allows attackers to gain SYSTEM privileges. The vulnerability was disclosed by a security researcher who published a proof-of-concept exploit.
Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager. The flaw was exploited in attacks to escalate to root privileges.
Microsoft fixed 206 vulnerabilities, including three publicly disclosed zero-days and several remote code execution bugs. The update also adds a new setting to help limit HTTP/2 and HTTP/3 denial-of-service attacks.
A researcher released a Microsoft Defender zero-day that can spawn a SYSTEM-level command prompt on fully patched Windows 10 and 11 devices.
Cisco has issued a warning about a high-severity, unpatched zero-day vulnerability (CVE-2026-20245) in its Catalyst SD-WAN Manager, which is actively being exploited to achieve root privilege escalation.
Microsoft says it has no intention of taking legal action against people who publish security research, after backlash over its response to public Windows zero-day disclosures.
Google’s June 2026 Android patches fix 124 flaws, including an actively exploited zero-day in Android Framework.
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
Microsoft defended coordinated disclosure after a researcher published multiple Windows zero-days, some now seen exploited in the wild.