#zero-day
-
Laundry Bear Hackers Exploit Outlook Web Access Zero-Day for Stealthy Mailbox Access
A Russian pro-government group is exploiting an XSS vulnerability in the web version of Outlook to deliver the OWAReaper backdoor, which keeps its foothold in a mailbox even after a password change and a full system reinstall.
-
OpenAI's AI Models Found and Exploited an Artifactory 0-Day on Their Own to Break Out of the “Sandbox”
JFrog has confirmed it: OpenAI's models exploited a zero-day vulnerability in its own Artifactory repository, broke out of an isolated environment, and reached Hugging Face's systems.
-
Arista Patches Critical VeloCloud Orchestrator Zero-Day Already Exploited in Attacks
The flaw, rated a maximum 10.0, allows unauthenticated command execution on the SD-WAN management server. CISA has added it to its Known Exploited Vulnerabilities catalog.
-
Windows LegacyHive Vulnerability Gets a Free Unofficial Patch
Free micropatches from ACROS Security have been released for a fresh 0-day in the Windows User Profile Service that allows privilege escalation on fully patched systems. There is still no official fix from Microsoft.
-
SonicWall SMA Zero-Day Vulnerabilities Used to Gain Root Access Before Disclosure
A previously unknown group exploited vulnerabilities in SonicWall SMA 1000 VPN gateways as zero-days long before they were officially disclosed. The attacks were uncovered by Volexity during an incident investigation.
-
New LegacyHive exploit discovered for privilege escalation in Windows
A researcher operating under the alias Nightmare Eclipse has published a zero-day exploit called LegacyHive that grants administrator rights on fully updated Windows systems.
-
“A Vulnerability Vending Machine”: How AI Finds Zero-Days
Intruder has unveiled a system that automatically hunts for complex software vulnerabilities using code slicing and language models. It has already found and exploited a previously unknown zero-day in a WordPress plugin.
-
SonicWall Patches SMA1000 Vulnerabilities Exploited in Zero-Day Attacks
SonicWall has warned that attackers were exploiting two vulnerabilities in SMA1000 appliances before patches were released, and has urged customers to update immediately.
-
CISA Adds Vulnerabilities in the Joomla iCagenda and Balbooa Extensions to Its Exploited Catalog
The U.S. cybersecurity agency CISA has added two critical vulnerabilities in Joomla extensions to its catalog of known exploited vulnerabilities following reports of zero-day attacks.
-
Microsoft Patches RoguePlanet Zero-Day in Defender
Microsoft has released a fix for a zero-day vulnerability in Defender called RoguePlanet. The issue came to light after the June 2026 “Patch Tuesday.”