#zero-day
-
Check Point warns of a management server zero-day used in targeted attacks
The vendor says a flaw in its Security Management Server was exploited as early as July 23 and shipped a fix on September 22. In parallel, attackers are probing Spark firewalls through a VPN flaw.
-
New BigDiskBuster zero-day cuts off Windows Defender updates
Researcher Abdelhamid Naceri has dropped yet another exploit against Microsoft's built-in antivirus — this one keeps Defender from updating. It is roughly the tenth flaw in his drawn-out feud with the company.
-
Cisco Fixes a Critical 0-Day in Identity Services Engine Already Being Used in Attacks
The CVE-2026-76460 vulnerability allows authentication to be bypassed via the API and grants access to the device without credentials. Cisco and CISA strongly urge installing the updates immediately.
-
Google Patches Actively Exploited 0-Day in Pixel
September's patch set for Pixel smartphones fixes 110 vulnerabilities, including a modem zero-day already being used in targeted attacks.
-
“ShieldCrash”: a new zero-day exploit for Microsoft Defender grants SYSTEM privileges
An anonymous researcher going by the handle Nightmare Eclipse has released an exploit for Microsoft Defender right after September's “Patch Tuesday.”
-
Google Patches the Seventh Chrome 0-Day of the Year, Used in Attacks
On Tuesday, Google closed 230 vulnerabilities, among them an actively exploited zero-day flaw in Chrome.
-
GPT-6 Astra hits a “critical” cybersecurity level — and became less transparent
OpenAI has admitted that its new GPT-6 Astra model can find and exploit unknown vulnerabilities on its own. At the same time, its chain of reasoning has become harder to follow.
-
N-able rushes out a fix for a critical RCE flaw in N-central
N-able has released an emergency update for its N-central remote monitoring platform, patching a maximum-severity vulnerability that allows arbitrary code execution without authentication.
-
StyleSmuggler: An Unpatched Magento 0-Day Is Already Being Used to Break Into Stores
The Dutch firm Sansec has disclosed a critical vulnerability in Magento Open Source and Adobe Commerce that allows code execution on the server without authentication. Attacks are happening right now, and there's still no patch from Adobe.
-
Google Patches Actively Exploited 0-Day in Chrome's V8 Engine
An emergency Chrome update fixes 12 vulnerabilities, including CVE-2026-85046 in the V8 engine, for which a working exploit already exists.
-
SonicWall Patches Two 0-Days in SMA 1000: Attackers Chain the Flaws Together
The company released updates for its SMA 1000 series VPN gateways after two vulnerabilities — one of them rated a maximum 10 on the CVSS scale — were actively exploited.
-
Fresh PaperCut Vulnerabilities Exploited to Steal Data
Two recently patched zero-day vulnerabilities in PaperCut NG and MF are now being used by attackers to steal data from vulnerable print servers.
-
PaperCut Patches a 0-Day: Every Version of NG and MF at Risk
Print management software maker PaperCut has warned customers that a vulnerability affecting all versions of NG and MF is being actively exploited, and it has shipped an emergency patch.
-
Microsoft closes the LegacyHive zero-day in Windows
In its August batch of updates, Microsoft fixed a vulnerability in the Windows User Profile Service that allowed local escalation to administrator privileges. The patch arrived a month after the PoC was published.
-
Researcher Publishes New Windows 0-Day Despite Microsoft's Threats to Sue
A specialist going by the handle Nightmare Eclipse has disclosed ShieldBreak, a Windows Defender vulnerability that allows privileges to be escalated to full control of the system. There is no patch yet.
-
Lazarus Exploited a Windows 0-Day to Attack Defense Firms
The North Korean group Lazarus exploited a zero-day vulnerability in AFD.sys for privilege escalation as part of the Operation Dream Job campaign, targeting the defense sector in Europe, India and Latin America.
-
ShieldBreak: PoC Bypasses Patch for Microsoft Defender Vulnerability
A researcher going by the handle Chaotic Eclipse has published a proof-of-concept that, by his account, fully bypasses Microsoft's fix for the RoguePlanet vulnerability and hands an attacker SYSTEM privileges.
-
Microsoft Patches 400 Vulnerabilities in August Update, Three of Them Zero-Days
Microsoft's August Patch Tuesday turned out to be record-breaking in scale: 400 fixed vulnerabilities and three zero-days, one of which has already been used by North Korea's Lazarus hackers.
-
Zero-Day in Metabase: SQL Injection with CVSS 10.0 Used to Steal Customer Data
A critical vulnerability in the Metabase analytics platform allowed an unauthenticated attacker to gain administrator privileges. Among those affected are laptop maker Framework and the form service Tally.
-
Cisco: Embedded Credentials in Secure FMC Used in Zero-Day Attacks
Cisco is warning of active exploitation of CVE-2026-20316 in Secure Firewall Management Center, caused by static credentials hardcoded into the software. Patches have already been released, and there are no workarounds.
- More