Tag: zero day
535 articles
AI Agents Exploit Zero-Days to Breach Security Research Org
In a shocking and unprecedented attack, malicious actors exploited two unknown flaws in a support platform to breach a leading security research organization, gaining root access in mere seconds. This lightning-fast intrusion has left experts stunned, declaring it an attack unlike any they've seen before.
Microsoft tracks hackers exploiting Zimbra bug before public disclosure
Microsoft detected hackers probing for a Zimbra bug, CVE-2026-73570, just days after it was patched, but before the vulnerability was publicly disclosed - a concerning gap that highlights the need for swift and secretive fixes. The bug, which allows attackers to run commands on exposed mail servers, was exploitable via a specially crafted email.
Cisco SD-WAN Zero-Day Exploited in Active Attacks
Cisco is urging customers to upgrade to a fixed software release after a critical zero-day vulnerability in its Catalyst SD-WAN Manager was exploited in active attacks, allowing unauthenticated remote attackers to gain admin-level access. The company has patched the flaw, rated 9.8 in severity, and advises swift action to prevent further breaches.
CISA Flags Exploited Cisco SD-WAN Flaw
A critical vulnerability in Cisco SD-WAN Manager, known as CVE-2026-76504, has been flagged by CISA and is being actively exploited, allowing hackers to gain admin-level access with a CVSS score of 9.8. This hex encoding flaw could let unauthenticated attackers remotely access and control affected systems.
Apple CoreGraphics Flaw Exposes Possible WhatsApp Delivery Path
A newly discovered Apple CoreGraphics flaw, potentially exploited in a highly targeted attack, now has a publicly available proof-of-concept that can crash unpatched iPhones and Macs. Apple has released a security update to patch the vulnerability, tracked as CVE-2026-86950.
OpenAI Disrupts Chinese AI Firm's Encryption Bypass Tactic
OpenAI thwarted a clever attack by a Chinese AI firm that attempted to bypass encryption and extract sensitive data from its models. The hackers used a novel tactic, manipulating model interactions to reproduce protected information, but ultimately didn't break the encryption or compromise user conversations.
Zero-days in Zammad ticketing system enable AI-driven network breach
In a shocking breach, two zero-day vulnerabilities in the Zammad ticketing system were exploited in tandem to hijack sessions, run code remotely, and escalate privileges to root in mere seconds. This devastating chain of attacks was made possible by an autonomous AI agent that enabled attackers to go from limited user access to full control of the host.
Hackers Exploit Zimbra Flaw to Harvest Authentication Secrets
Hackers are actively exploiting a high-severity flaw in Zimbra Collaboration Suite to gain remote access and harvest sensitive authentication secrets. This vulnerability, patched in July 2026, can be triggered by a specially crafted email, making it a critical threat to unprotected servers.
CISA Warns of Pre-Auth Flaw in MikroTik RouterOS
A critical vulnerability in MikroTik RouterOS, known as CVE-2026-84411, can be exploited with a single crafted request, allowing attackers to execute code with root privileges or cause a denial-of-service condition, even without authentication. This flaw puts your network at risk, and it's essential to take immediate action to protect yourself.
Cisco Discloses SD-WAN Zero-Day Exploited in Attacks
Cisco is urging organizations to act fast after discovering a critical zero-day vulnerability in its Catalyst SD-WAN Manager, which is already being exploited by attackers to gain administrative privileges. Upgrade to a fixed software release ASAP to protect your network from potential breaches.
TeamViewer Warns Users to Patch Flaws Amid Remote Code Execution Risk
TeamViewer is urging users to update to the latest version immediately due to a critical security risk that could allow hackers to take control of your device. A high-severity flaw, CVE-2026-92370, and four others have been identified, highlighting the urgent need for an update to protect against remote code execution attacks.
Bitget Breach Exposes Zero-Day Flaw in Third-Party Security Products
A staggering $387.5 million was stolen from Bitget after attackers exploited a zero-day flaw in third-party security products to breach the exchange's wallet environment. This shocking breach highlights the vulnerability of even the most secure systems to unknown threats.
Apple Fixes Zero-Day Flaw Exploited in Targeted Attacks
Apple just patched a zero-day flaw that let hackers run malicious code on your device - and it's already been used in super-sophisticated attacks on specific targets. Processing a malicious file could give attackers free rein, so update your iOS to stay safe!
Citrix NetScaler Flaw Exposes Pre-Auth Path to Shellcode Execution
A critical flaw in Citrix NetScaler appliances, tracked as CVE-2026-88772, has been patched after being exploited in the wild, allowing for remote code execution or denial-of-service attacks. This severe vulnerability, with a CVSS score of 9.5, was caused by a memory overflow in Datagram Transport Layer Security (DTLS) protocol handling.
Mandiant Exposes Citrix NetScaler Zero-Day Exploits by Suspected State Actors
Dozens of organizations across North America and Europe, spanning critical sectors like government, finance, and education, have been impacted by a massive cyberattack exploiting a zero-day vulnerability in Citrix NetScaler appliances. The stealthy campaign, suspected to be carried out by state actors, went undetected for at least three weeks, allowing attackers to compromise a wide range of industries.
Hackers Exploit Citrix Zero-Day to Deploy Web Shells, Malware
Hackers were quick to pounce on a Citrix zero-day vulnerability, attempting to install a hidden PHP web shell just days before the flaw was publicly disclosed. This early activity sparked a wider campaign, enabling attackers to gain root access, deploy malware, and tunnel into internal networks using the newly disclosed CVE-2026-88771 and CVE-2026-88772 vulnerabilities.
Citrix Zero-Day Exploits Target Gov't, Finance Firms with Custom Malware
A concerning cybersecurity crisis is unfolding as government agencies, banks, and other organizations across North America and Europe face targeted attacks exploiting critical Citrix vulnerabilities with custom malware. The attacks, which have been observed in the wild, take advantage of two critical CVEs, CVE-2026-88771 and CVE-2026-88772, both rated 9.5 CVSS.
Apple fixes exploited CoreGraphics zero-day in urgent patch rollout
Apple just dropped an urgent patch to fix a CoreGraphics zero-day vulnerability that's been exploited in targeted attacks - it's crucial to update your devices ASAP to stay protected. This swift fix comes after the flaw was used to launch attacks before a public fix was available.
NetScaler Zero-Days Exploited in Wild, 50,277 Instances Exposed
A whopping 50,277 NetScaler instances are potentially vulnerable to two newly exploited zero-day flaws, CVE-2026-88771 and CVE-2026-88772, according to Palo Alto Networks' Cortex Xpanse telemetry. This alarming number was highlighted in Unit 42's threat brief, revealing a possible zero-day attack on NetScaler devices.
Kubernetes Operators Expose Hidden Security Risks
A recent discovery revealed that Kubernetes Operators, like IBM Turbonomic, can harbor hidden security risks, including granting excessive access to sensitive cluster data, putting administrative tokens and credentials at risk. Meet OperTraitor, an innovative, open-source tool that helps you uncover these threats by analyzing operator permissions and identifying potential security gaps.
Citrix Rushes Patches for Exploited NetScaler Zero-Days
Citrix has rushed out patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, which were being actively exploited by hackers, with a severity rating of 9.5 on the CVSS scale. The patches fix command-injection flaws that allowed remote code execution, and were released just days after researchers warned of the threats.
Apple patches zero-day flaw in CoreGraphics exploited in targeted attacks
Apple just patched a zero-day flaw in CoreGraphics that was exploited in super-sophisticated targeted attacks - and you might want to update your devices ASAP! This out-of-bounds write vulnerability, tracked as CVE-2026-20700, could put your iOS device at risk if you're running an older version.
Apple Fixes CoreGraphics Flaw Targeted in Sophisticated Attacks
Apple patched a critical CoreGraphics flaw that could let hackers execute arbitrary code on your device, and warned that highly targeted attacks may have already exploited this vulnerability. The fix, which improves bounds checking, is now available for affected systems.
Citrix Patches Zero-Days Exploited in Active Attacks
Citrix has sounded the alarm, warning that two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, are being actively exploited in the wild, putting unpatched NetScaler deployments at risk. The flaws, including a remote code execution vulnerability, can allow attackers to wreak havoc on your system.