Tag: zero day
535 articles
Chinese hackers exploit BeyondTrust zero-day in espionage push
Chinese hackers have been exploiting a critical zero-day vulnerability in BeyondTrust Remote Support, first detected on August 29, in a sophisticated espionage campaign attributed to the threat group Armory Castle. A patch was released on October 8 to fix the defect, tracked as CVE-2026-102764.
Candiru Spyware Exploits Targeted Ads for Zero-Click Attacks
Meet AdFection, a sneaky zero-click infection technique that uses targeted online ads to spread Candiru spyware, requiring just a single ad load to compromise a device. This clever exploit forms a bridge between mercenary spyware companies and the advertising ecosystem, allowing for stealthy attacks with no user interaction needed.
Google Warns of China Espionage Actor Exploiting BeyondTrust Flaw
Google warns that a suspected China state-sponsored espionage actor, known as Armory Castle, has been actively exploiting a critical BeyondTrust Remote Support vulnerability, rated 9.3 on the CVSS scale, since August 2026. This group has a history of long-term intelligence collection for the People’s Republic of China, targeting industries from legal services to government agencies.
China-Linked Hackers Exploit BeyondTrust Zero-Day to Breach Remote Support Servers
A high-severity flaw in BeyondTrust Remote Support was exploited as a zero-day by a China-linked group, allowing them to take control of at least one self-hosted remote support appliance. The vulnerability, rated CVSS 9.3, was swiftly patched by BeyondTrust for SaaS customers, with self-hosted customers receiving manual update instructions.
BeyondTrust Zero-Day Exploited in Targeted Attacks Since August
A critical zero-day vulnerability, CVE-2026-102764, has been exploited in targeted attacks since late August, putting BeyondTrust Remote Support users at risk of file operations and even full root control by unprivileged remote attackers. The flaw affects Remote Support builds 26.2.3 and earlier, but thankfully, patches are available.
Citizen Lab Exposes Candiru Spyware Infections Through Targeted Online Ads
Meet the sneaky spyware that can infect your device with just a single online ad - no clicks required. Citizen Lab researchers uncovered a cunning ad-delivery chain used by Discover-Tech to spread zero-click spyware, infecting targets with alarming precision.
Healthcare Ransomware Attacks Surge, Exposing Sector's Vulnerabilities
Healthcare organizations are being hit with a staggering 3.33 ransomware attacks per day, making them a treasure trove for hackers seeking sensitive information and massive payouts. This surge in attacks highlights the sector's alarming vulnerability to cyber threats.
Palo Alto Networks Discloses Exploited PAN-OS Zero-Day Flaw
Palo Alto Networks has patched a high-severity zero-day flaw, CVE-2026-0322, that lets hackers execute code as root on vulnerable firewalls and appliances. The company says only limited exploitation has been observed so far, but urges users to update their PAN-OS management interface ASAP.
Cisco Email Flaw Exploited in Zero-Day Attacks
Cisco is urging customers to upgrade to a fixed software release after a critical vulnerability in its Secure Email Gateway was exploited in active zero-day attacks, allowing hackers to gain root access with just a malicious email. The flaw, scored 9.8 out of 10 on the CVSS scale, enables remote attackers to write files and execute commands with root privileges on the appliance operating system.
Microsoft Discloses 1,413 Vulnerabilities, Including Actively Exploited Zero-Day
Microsoft just revealed a staggering 1,413 vulnerabilities in its October 2026 Patch Tuesday update, shattering its previous record of 1,261 set in 2020. Among these defects is a particularly concerning actively exploited zero-day flaw in Windows Shell, CVE-2026-96951.
Researchers Craft Billion-User Chrome Exploit in Six Days
In just six days, a team of four researchers harnessed the power of a publicly available AI model to craft a Chrome exploit that earned them a whopping $250,000 bounty from Google. With the help of OpenAI's GPT-5.6 Sol model, they chained together three zero-day Chrome vulnerabilities, proving that innovation and speed can pay off big time.
Cisco Discloses Active Attacks on Secure Email Gateway Flaw
Cisco is warning users of its Secure Email Gateway of an actively exploited flaw that could allow hackers to run commands as root, giving them total control of the system. This critical vulnerability, scored 9.8, is being targeted by attackers who are sending crafted email attachments to take advantage of the weakness.
Ivanti Discloses Zero-Day Exploits in Connect Secure
Ivanti has sounded the alarm on zero-day exploits targeting its Connect Secure software, warning that a limited number of customers have already been affected. The company has released urgent updates to patch the vulnerabilities and is urging customers to act fast to avoid falling prey to these attacks.
Cisco Disrupts Zero-Day Attacks on Secure Email Gateway
Cisco is taking swift action to stop zero-day attacks on its Secure Email Gateway, recently discovering a vulnerability that allowed hackers to write arbitrary files and execute commands with root privileges. This critical flaw, tracked as CVE-2026-76519, was triggered by a simple malicious email attachment, making swift patching a top priority.
CISA Warns of Ivanti Flaw Exploited in Zero-Day Attacks
A high-severity security flaw in Ivanti Connect Secure, known as CVE-2026-104935, has been exploited in zero-day attacks since October 1st, allowing hackers to remotely execute malicious commands without authentication. CISA is urging security teams to patch immediately and hunt for signs of compromise to protect their networks.
CISA Warns of Active Ivanti Connect Secure Exploit Attempts
Warning signs are flashing: 105 attempted hacks have targeted Ivanti Connect Secure systems in a short span, exploiting a severe authentication-bypass bug that lets attackers run malicious commands remotely. This zero-day vulnerability, tracked as CVE-2026-104935, is under active attack, putting unpatched systems at risk.
AI Agents Accelerate Chrome Exploit to $250,000 Payout in Six Days
In just six days, a researcher used AI agents to create a Chrome exploit chain that raked in a $250,000 payout - a stunning achievement that's a testament to the power of speed and innovation in cybersecurity. This lightning-fast feat was made possible by harnessing the power of AI, which racked up around $40,000 in compute charges.
Windows Updates Disrupt Remote Desktop Connections
Recent Windows updates are causing a headache for remote workers, with Remote Desktop connections failing due to a compatibility issue when Administrator protection is enabled. This frustrating error, marked as 0xC000000D, prevents non-administrator users from connecting to devices, leaving teams stuck.
Microsoft Discloses Record 1411 CVEs in October Patch Update
Microsoft just dropped a record-breaking 1,411 security updates in its October Patch Tuesday release, outpacing the total number of fixes issued in all of 2025. This massive haul was made possible by the company's new AI-driven scanning tools that supercharge vulnerability detection.
Ivanti Zero-Day Exploited Before Patch Release
Ivanti's internal discovery of a zero-day vulnerability in June didn't stop attackers from exploiting it in the wild by October 1, highlighting a disturbing gap in patch protection. Researchers uncovered a chain of three zero-day flaws being used to breach Ivanti Connect Secure authentication and execute remote code.
Microsoft Discloses Over 1,400 Security Flaws in Record Patch Update
Microsoft just dropped a record-breaking patch update, fixing over 1,400 security vulnerabilities in Windows and other software - that's roughly ten times its usual monthly output! This massive update surpasses the previous record, and brings the year's total discovered vulnerabilities to over 4,000.
Microsoft Bolsters Windows 10 with KB5126657 Security Update
Microsoft just dropped a crucial security update, KB5126657, for Windows 10, packing fixes for a whopping 1,411 vulnerabilities, including an actively exploited zero-day flaw. This update is a must-install for all Windows 10 users, especially those running Enterprise LTSC or enrolled in the program.
Microsoft Patch Tuesday Disrupts 1,411 Flaws, Zero-Day Exploits
Microsoft's October Patch Tuesday update is a doozy, tackling a staggering 1,411 vulnerabilities in one fell swoop! This record-breaking release includes fixes for a massive number of flaws across the company's software portfolio.
Ivanti Zero-Days Exploited for Root Access
Hackers are on the loose, exploiting three Ivanti zero-day vulnerabilities to gain root access to sensitive systems - and they don't even need a login to do it. This alarming exploit chain allows attackers to run commands with full system privileges, putting organizations at serious risk.