#0-day
-
D-Link warns of maximum-severity zero-day in DIR-822A routers
A maximum-severity flaw in legacy DIR-822A routers already has a public PoC exploit — and no patch is available yet.
-
Meta's highly privileged AI assistant Muse hit by a serious 0-day
Muse, Meta's new AI agent with sweeping permissions, turns out to be vulnerable: one way to fully hijack it is a simple ClickFix attack.
-
Russian Group Spent Six Months Reading Western Email via a 0-day in Zimbra
Opening the message was enough: the attack stole 90 days of correspondence, the password from the browser and two-factor authentication codes. The NSA, CISA and partners issued a joint advisory.
-
Microsoft Ships a Record-Breaking Patch Set: 622 Vulnerabilities and Two Actively Exploited 0-Days
Microsoft's July Patch Tuesday became the largest in the company's history — 622 vulnerabilities fixed, two of them already being used by attackers.