Tag: zero day initiative
8 articles
Oracle PeopleSoft Zero-Day Exploited via Chained Flaws
Oracle just patched a critical vulnerability in PeopleSoft, but here's the catch: it was actually three flaws chained together that attackers had been exploiting since May. The single patch, CVE-2026-35273, earned a near-perfect CVSS score of 9.8, highlighting the severity of the issue.
Microsoft Disrupts 1,413 Vulnerabilities, Fixes Exploited Windows Shell Bug
Microsoft just dropped a record-breaking Patch Tuesday update, tackling a whopping 1,413 vulnerabilities - and yes, that includes a critical Windows Shell bug that's already being exploited. This massive release underscores a new normal in cybersecurity: hundreds of fixes are no longer an exception, but the baseline.
Hackers Expose 32 Zero-Day Flaws in Pwn2Own Ireland Contest
In just one day, top ethical hackers at Pwn2Own Ireland 2026 uncovered a staggering 32 zero-day vulnerabilities, raking in over $368,000 in prizes and showcasing the impressive skills of today's cybersecurity experts. This impressive haul highlights the vast attack surfaces of modern technology and the talent of the global ethical-research community.
7-Zip Flaw Exposes Systems to Code Execution Risk
A newly discovered flaw in 7-Zip, tracked as CVE-2026-14266, leaves systems vulnerable to code execution attacks, allowing hackers to execute code in the context of the current process. Fortunately, a fix is available in 7-Zip version 26.02, which patches the heap-based buffer overflow issue.
7-Zip Patches RCE Flaw in XZ-Compressed Data Handling
Don't risk your files! 7-Zip's latest update, version 26.02, patches a critical vulnerability that could let hackers take control when you open a malicious archive.
Progress LoadMaster Flaw Lets Attackers Run Root Commands Pre-Auth
A critical flaw in Progress Kemp LoadMaster, known as CVE-2026-8037, allows attackers to run root commands without authentication - but a patch is now available to fix this gaping security hole. This vulnerability, scoring a severe 9.8, can be exploited with a simple crafted API request.
Microsoft Patch Tuesday Update Sets Record with 206 Vulnerabilities Fixed
Microsoft just dropped a record-breaking Patch Tuesday update, fixing a staggering 206 vulnerabilities in a single swoop - a move that's both impressive and concerning. This massive update is part of a larger trend, with nearly half of this year's patches containing triple-digit numbers of fixes.
Security Researchers Uncover 47 Zero-Days at Pwn2Own Berlin
In a thrilling three-day competition, security researchers at Pwn2Own Berlin uncovered a staggering 47 zero-day vulnerabilities, raking in nearly $1.3 million in prize money, with the Devcore Research Team taking home a whopping $505,000. The top prizes included a $200,000 award for a VMware ESXi exploit and a $100,000 prize for a Microsoft SharePoint hack.