#zero-day
-
Cisco patches actively exploited zero-day in ASA and FTD firewalls
CVE-2026-76418 lets unauthenticated remote attackers force Cisco firewalls with SSL VPN enabled to reload. The company has already seen attacks and urges customers to update.
-
Volt Typhoon Ran Four Zero-Day Campaigns Through the Covert Silent Train Network
Black Lotus Labs (Lumen Technologies) has linked Volt Typhoon to Silent Train, a now-disrupted covert network of constantly rotating chains of compromised routers, IoT devices and enterprise equipment. The group used it to exploit zero-days and hold on to access in strategically important US networks.
-
Apple brings CoreGraphics zero-day fix to older iPhones and iPads
Apple has released patches for older iPhones and iPads that close a zero-day vulnerability in CoreGraphics. According to the company, the flaw was used in "extremely sophisticated" targeted attacks.
-
Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day
Arista has shipped fixes for on-premises VeloCloud Orchestrator: a critical SQL injection flaw is already being exploited and lets authenticated users escalate to superuser privileges.
-
Cellebrite Advanced Unlocks: an iPhone break-in "over the air" from up to 8 meters?
A leaked confidential Cellebrite document describes a new product called Advanced Unlocks that, by its own description, does not appear to need a cable connection to the target device.
-
China-Linked Hackers Used BeyondTrust Zero-Day to Seize Remote Support Servers
The espionage group Armory Castle exploited a critical flaw in BeyondTrust Remote Support as a zero-day back in late August — a month and a half before a fix shipped.
-
Palo Alto Networks patches exploited RCE flaw in PAN-OS
The company has shipped updates for PAN-OS zero-day CVE-2026-0322, already being leveraged in attacks against firewalls.
-
Cisco Patches New Actively Exploited Secure Email Gateway Zero-Day
A flaw in the gateway's malware-protection feature let remote, unauthenticated attackers run commands as root. Cisco says it saw the bug exploited in the wild in October 2026.
-
Ivanti warns of actively exploited Connect Secure zero-day
Ivanti is urging customers to patch immediately: an actively exploited flaw in its Connect Secure remote access gateway lets attackers bypass authentication and run commands on affected appliances.
-
Pwn2Own Ireland Day Two: Galaxy S26 Falls Three More Times
On the second day of Pwn2Own Ireland 2026, researchers earned $232,500 by demonstrating 45 unique zero-day vulnerabilities. Samsung's flagship was once again the star of the show.
-
Pwn2Own Ireland 2026: 32 zero-days and $388,500 on day one
On the opening day researchers cracked the Samsung Galaxy S26 flagship twice and earned nearly $390,000 by exploiting 32 previously unknown flaws.
-
Citrix rushes out fix for exploited NetScaler zero-day
Citrix has shipped emergency NetScaler updates for CVE-2026-88779, already used in attacks. It is billed as a denial-of-service flaw, but researchers suspect remote code execution too.
-
Fortinet warns of critical FortiMail flaw already exploited in the wild
Fortinet has disclosed a critical FortiMail vulnerability with a CVSS score of 9.8 that attackers are exploiting as a zero-day. Patches are not yet available for every affected version.
-
DIVD: Zammad zero-days let an AI agent breach its network
The Dutch Institute for Vulnerability Disclosure says its network was breached through a chain of two zero-day flaws in the open-source Zammad ticketing system — with an autonomous AI agent at the controls.
-
Cisco patches fifth SD-WAN Manager zero-day of the year amid active attacks
A critical authentication-bypass flaw, CVE-2026-76504, lets an unauthenticated attacker gain admin rights on Catalyst SD-WAN Manager. Cisco has confirmed active exploitation and shipped fixes.
-
Apple patches actively exploited CoreGraphics zero-day
Apple has shipped security updates that fix a zero-day flaw used in "extremely sophisticated" targeted attacks against iOS devices.
-
Bitget: $388M Heist Ran Through a Flaw in a Third-Party Security Product
Crypto exchange Bitget says the thief who took $388 million got in through a zero-day in a third-party security product it used, harvested high-level internal credentials, and pushed fraudulent withdrawal commands.
-
Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Attack
Security firm watchTowr warned of two unpatched remote-code-execution flaws in NetScaler ADC and Gateway. Citrix has neither confirmed the issue nor shipped a fix, and some administrators have simply powered their appliances off.
-
Kiteworks tells customers to shut down servers over 'imminent' attack threat
Kiteworks, which makes tools for transferring large files, received a warning from law enforcement about an 'imminent' cyberattack and urged customers to temporarily take their servers offline.
-
China's UTA0565 Chains Chrome and Windows Zero-Days to Drop CLEANGULP
The group leaned on a three-flaw exploit chain and fake media and NGO websites to escape the browser sandbox and infect victims with a new backdoor.
- More