Tag: zero day
368 articles
CISA Catalog Exposes Actively Exploited Flaws in Fortinet, Microsoft, Adobe Software
The US Cybersecurity and Infrastructure Security Agency (CISA) has just added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that flaws in Fortinet, Microsoft, and Adobe software are being actively exploited by hackers. Is your system exposed - and what can you do to protect it?
Adobe Fixes Zero-Day Flaw in Acrobat Reader Exploited in Attacks
Adobe has rushed out an emergency patch for a critical vulnerability in Acrobat Reader that's been exploited by attackers since at least December, forcing users to rethink their document reader's security. This zero-day flaw, tracked as CVE-2026-34621, highlights the rapid discovery and weaponization of software flaws.
Zero-Day Exploits Target PDF Files Amid State-Sponsored Infrastructure Meddling
A critical zero-day flaw has been hiding in plain sight within everyday PDF files, and at the same time, state-sponsored actors have been aggressively probing vital infrastructure, creating a perfect storm that demands immediate attention. This dual threat of quietly persistent PDFs and long-simmering meddling has escalated into a situation that requires rapid action.
Zero-Day Exploits Proliferate as Breakout Times Shrink
Imagine a research preview that can teach itself to find and exploit the very flaws security teams scramble to patch - that's now a harsh reality, as an advanced language model has autonomously discovered and exploited zero-day vulnerabilities in every major operating system and browser. This breakthrough should be a wake-up call for security teams to rethink their response times to alerts.
Anthropic Unveils Mythos AI, Raises Stakes in Zero-Day Exploitation Race
Anthropic just unveiled Mythos AI, a game-changing model that can allegedly uncover and exploit zero-day vulnerabilities with unprecedented skill - but is it a revolutionary breakthrough or just pre-IPO hype? The tech community is buzzing with skepticism and curiosity.
Adobe Fixes Exploited Flaw in Acrobat Reader
Adobe has issued an emergency update to fix a critical security flaw in Acrobat Reader that's being actively exploited by hackers, allowing them to run malicious code on affected installations. If you're one of millions of users, make sure to update now to keep your data safe.
Anthropic's AI Model Exposes Enterprise Cybersecurity Readiness Gap
The unveiling of Anthropic's Claude Mythos Preview has sent a stark message to enterprise leaders: the cybersecurity tools they've relied on may no longer be enough to protect their networks from zero-day flaws that even humans miss. This frontier AI model has the potential to expose a gaping hole in their cybersecurity readiness.
Tech Giants Unveil AI-Powered Bid to Fix Open Source Flaws
Tech giants have launched a game-changing $100 million initiative, Project Glasswing, harnessing AI to uncover and fix hidden flaws in critical open source software, aiming to bolster security and prevent devastating exploits. Led by Anthropic, this coalition is proactively tackling vulnerabilities with a cutting-edge AI program called Mythos.
EngageLab SDK Flaw Compromises 50M Android Users
A security flaw in the EngageLab SDK has put a whopping 50 million Android users at risk, allowing apps on the same device to bypass Android's security sandbox and gain unauthorized access to sensitive information. This vulnerability, now patched, exposed cryptocurrency wallet users and others to potential data breaches.
Chinese Supercomputer Breach Exposes Massive 10-Petabyte Data Heist
A massive 10-petabyte data heist has been reported from a state-run Chinese supercomputer, raising urgent questions about the breach and its potential consequences. The staggering scale of the alleged theft has sparked widespread concern, but details about the incident remain scarce.
Mythos Model Unleashes Zero-Day Exploit Capabilities for Mass Use
The game has changed: a new AI model called Mythos can now uncover devastating zero-day flaws in software and chain them together to create powerful exploits, putting this potent capability in the hands of anyone with an internet connection. This development blurs the lines between nation-state hackers and amateur cyber attackers, raising urgent questions about the future of cybersecurity.
Adobe Reader Zero-Day Exploits PDFs to Profile Targets
Malicious PDFs are being used to secretly profile targets, leveraging legitimate features to harvest system data and decide which victims are worthy of a second, more invasive attack. This sneaky tactic uses booby-trapped PDFs to quietly gather intel and determine if you're a high-value target.
Adobe Reader Zero-Day Exploited in Targeted Attacks Since December
A previously unknown zero-day vulnerability in Adobe Reader has been exploited in targeted attacks since December, using maliciously crafted PDF documents to quietly turn trusted files into stealthy threats. This highly sophisticated exploit raises serious questions about the security of everyday file formats and our trust in them.
Adobe Reader zero-day flaw under active exploitation
Malicious PDF documents have been hiding a nasty secret: a zero-day vulnerability in Adobe Reader that's been exploited by attackers since at least December, allowing them to spread malware and wreak havoc. This stealthy threat highlights the urgent need for better detection and response to these types of attacks.
Anthropic AI Model Exposes Thousands of Zero-Day Vulnerabilities
Imagine a super-smart AI tool that can uncover thousands of hidden software flaws that nobody knew existed - and what happens when that powerful technology falls into the wrong hands? A new AI model from Anthropic has raised the stakes, leaving cybersecurity experts worried about a surge in zero-day vulnerabilities.
CISA Mandates Emergency Patch for Exploited Ivanti EPMM Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert, ordering US government agencies to patch a critical vulnerability in Ivanti Endpoint Manager Mobile (EPMM) within just four days, as the flaw has been under active exploitation since January. With a Sunday deadline looming, federal IT teams are racing against the clock to secure systems and prevent further attacks.
Apache ActiveMQ Flaw Exposes Systems to Remote Code Execution
A critical security flaw in Apache ActiveMQ Classic, hidden for over 13 years, allows remote code execution, putting vulnerable systems at risk of arbitrary command execution. This long-undetected vulnerability highlights the importance of staying vigilant and proactive in identifying and addressing potential security threats.
Anthropic's AI Model Exposes Thousands of Zero-Day Flaws in Major Systems
Anthropic's cutting-edge AI model, Claude Mythos, has made a groundbreaking discovery - uncovering thousands of zero-day flaws in major systems, giving us a glimpse into the hidden vulnerabilities of our digital world. This breakthrough is the result of Anthropic's innovative Project Glasswing initiative, which aims to revolutionize cybersecurity.
Claude AI Uncovers 13-Year-Old Apache ActiveMQ Bug
Meet the AI that just uncovered a 13-year-old secret: Anthropic's Claude helped researchers discover a long-hidden vulnerability in Apache ActiveMQ Classic, a flaw that had been quietly lurking for over a decade. This groundbreaking find is a testament to the power of AI-assisted research in uncovering even the most elusive bugs.
Microsoft Deploys Fix for Windows Start Menu Search Disruption
Microsoft has swiftly deployed a server-side fix to resolve a frustrating issue that left some Windows 11 23H2 users unable to access the Start Menu search feature. This quick action means you should now be able to search with ease again.
Fortinet Zero-Day Flaw Exploited in Active Attacks
A critical Fortinet zero-day flaw is under active attack, allowing hackers to remotely take control of vulnerable endpoint management servers without authentication - leaving organizations with a pressing choice: patch now or risk a devastating breach. Immediate action is crucial, as attackers have already begun exploiting these vulnerabilities to execute malicious code and commands.
Cybersecurity Breaches Mount as Exploits Target Key Software
This week's cybersecurity breaches are a stark reminder that even the tools we trust can be vulnerable to exploitation - and it's getting easier for hackers to strike. Key software tampering, everyday tool vulnerabilities, and alarmingly simple attack methods have put businesses and individuals on high alert.
Hackers Exploit TrueConf Flaw to Deploy Malicious Updates
Imagine the video conferencing platform you rely on to connect with your team being turned against you, allowing hackers to spread malicious software to everyone in the room. A recently discovered zero-day flaw in TrueConf's update mechanism has been exploited by threat actors to deliver and execute malicious files on connected devices.
Microsoft Patch Tuesday Exclusive: Best Critical Fixes
Heads up: Microsoft’s March Patch Tuesday delivers fixes for 77 vulnerabilities—no fresh zero-days, but the volume means admins should triage quickly and prioritize internet-facing and critical servers before attackers turn disclosures into exploits.