Tag: zero day
535 articles
Citrix Warns of Critical Vulnerabilities Under Active Attack
Critical vulnerabilities in Citrix NetScaler appliances are under active attack globally, and the Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to patch quickly despite the potential complexity of the update process.
CISA Mandates Patching of Exploited Citrix Flaws
The US government has stepped in, mandating that federal agencies patch two critical Citrix flaws by September 30 to prevent exploitation by malicious actors. This swift action follows the discovery of over 23,000 Internet-facing IP addresses vulnerable to these Citrix NetScaler flaws.
Citrix NetScaler Zero-Days Exploited in Wild Ahead of Patches
Citrix administrators were abruptly warned to shut down their NetScaler appliances amid reports of zero-day exploits being used in the wild, with private alerts circulating before patches were available. The sudden shutdowns followed discreet notifications from IT suppliers, security teams, and law enforcement, leaving many scrambling for answers.
Citrix NetScaler Zero-Days Under Active Exploitation
Security firm watchTowr has sounded the alarm about two zero-day vulnerabilities in Citrix NetScaler appliances that are already being exploited in the wild, allowing for remote code execution. These unpatched flaws were discovered during forensic investigations and are expected to have a fix soon.
Kiteworks Orders Global Server Shutdown Over Zero-Day Threat
Kiteworks has issued a rare global server shutdown alert due to a credible threat of an imminent cyberattack, urging customers to power down their servers for six hours on Saturday. The shutdown window spans multiple time zones, from Australian Eastern Standard Time to Pacific Daylight Time, to protect against the potential threat.
Salesforce Zero-Click Flaws Expose AI Agent Data Risk
Security researchers just uncovered a set of zero-click flaws in Salesforce Agentforce that let attackers silently siphon off sensitive CRM data without even needing to log in. This clever exploit, dubbed "SalesBleed," could put AI agent data at risk - and it's a wake-up call for companies to take action.
Salesforce Vulnerabilities Expose CRM Data to Zero-Click Attacks
Meet SalesBleed, a trio of security flaws in Salesforce Agentforce that allowed hackers to hijack AI agents, steal sensitive CRM data, and send phishing messages - all without a single click. These vulnerabilities exposed the power of unchecked AI, as one expert warned: it's a lesson in what it takes to keep AI agents contained.
Hackers Exploit Check Point VPN Flaws
Hackers have been actively exploiting two major flaws in Check Point VPNs, including one that allowed for remote code execution and another that enabled script execution, putting customers at risk. The attacks, which began as early as July 23, have now been confirmed by the cybersecurity company itself.
Attackers Exploit F5 BIG-IP APM Zero-Day Vulnerability
A critical zero-day vulnerability in F5 BIG-IP APM is under active attack, putting organizations at risk of remote code execution - and it's essential to take immediate action to protect yourself. This unpatched flaw is being exploited by attackers, making it crucial to act now to safeguard your systems.
MikroTik Routers Targeted in Pre-Patch Exploits
Hackers are exploiting two critical flaws in MikroTik routers, allowing them to gain full control of internet-exposed devices even before patches were available. The "MikroTrick" chain, which combines two vulnerabilities, lets attackers open a privileged console without needing login credentials.
Arista Disrupts Actively Exploited Zero-Day in VeloCloud Orchestrator
Arista Networks has sounded the alarm on a critical zero-day vulnerability, CVE-2026-93952, that's being actively exploited in the wild, allowing attackers to access sensitive internal functionality in VeloCloud Orchestrator. This severe flaw can be easily exploited with low complexity, making it a high-risk threat.
ShinyHunters Breaches FBI via PeopleSoft Zero-Day Exploit
The notorious hacking group ShinyHunters has boldly claimed to have breached FBI data, posting personnel records of all employees and applicants on its leak site in a brazen act of retaliation. The stolen records reportedly include sensitive info like addresses, phone numbers, and dates of birth for around 5,000 FBI employees.
Chinese Hackers Exploit Chrome-Windows Zero-Days to Deploy CLEANGULP Malware
Chinese hackers masqueraded as reputable media organizations and NGOs, using convincing phishing messages and fake sites to deploy the CLEANGULP malware, with one recent campaign targeting Asian government entities over support for a Hong Kong activist. They sent spoofed emails that appeared to be from the Center for American Progress, complete with links to suspicious domains.
F5 Discloses Zero-Day Flaw in BIG-IP APM Exploited for Unauthenticated RCE
A critical flaw in F5's BIG-IP Access Policy Manager is being exploited by attackers, allowing them to run code on the system without logging in. This severe vulnerability, tracked as CVE-2026-94127, has a near-perfect score of 9.8/10 on CVSS v3.1 and enables unauthenticated remote code execution.
China-Aligned Group Exploits Chrome, Microsoft Zero-Days
A China-aligned threat group has been exploiting a chain of three zero-day vulnerabilities in Google Chrome and Microsoft Windows, highlighting a coordinated effort within the Chinese computer network exploitation community. This alarming discovery reveals the group's ability to rapidly weaponize and customize exploits across multiple campaigns.
Check Point Discloses Zero-Day Flaw in Management Server Exploited in Targeted Attacks
A high-severity zero-day flaw in Check Point's Security Management Server was exploited in targeted attacks on July 23, allowing hackers to upload and execute scripts without logging in. This critical vulnerability, scored 9.8 out of 10 on the CVSS scale, highlights the urgent need for patching and protection.
ShinyHunters Breach FBI Systems with Oracle PeopleSoft Zero-Day
Meet the hackers who just pulled off a massive heist: ShinyHunters claims to have stolen 2-3TB of sensitive data from FBI systems by exploiting a previously unknown flaw in Oracle PeopleSoft. The breach reportedly exposed personal info of current and former FBI employees, as well as applicant data.
Zero-Day Tool Blocks Microsoft Defender Updates
Meet BigDiskBuster, a newly released zero-day tool that cleverly blocks Microsoft Defender updates by maxing out disk space, leaving users vulnerable until a fix is found. Its creator, Abdelhamid Naceri, a former Microsoft security researcher, has made the proof-of-concept tool publicly available on GitHub.
Check Point Discloses Zero-Day Exploited in Management Server Attacks
A critical zero-day vulnerability in Check Point's Security Management Server has been exploited in the wild, allowing attackers to upload and run malicious scripts with ease. This flaw, tracked as CVE-2026-93616, has already been used to target a handful of customers, prompting Check Point to release emergency hotfixes.
ShinyHunters, Clop Feud Escalates, Threatens Broader Security Risks
The rivalry between Clop and ShinyHunters is heating up, with public defacements, bold demands, and technical claims that could have far-reaching consequences for past victims. These two extortion groups have distinct approaches, with Clop exploiting zero-day vulnerabilities and ShinyHunters taking a different tack.
Arista Warns of Active Exploits in VeloCloud Orchestrator Flaw
Arista warns of a critical vulnerability in its VeloCloud Orchestrator, tracked as CVE-2026-93952, which is being actively exploited by attackers and could allow them to gain unauthorized access to sensitive data and devices. This severe flaw has been assigned a CVSS 3.1 score of 10.0, indicating a high risk of compromise.
D-Link Routers Expose Zero-Day Flaw to Remote Attacks
D-Link routers are under threat from a zero-day flaw that lets hackers launch remote attacks without needing login credentials, simply by sending specially crafted DHCP packets. This vulnerability can cause the device's DHCP daemon to crash or allow attackers to execute malicious code, putting your data at risk.
Microsoft Defender Zero-Day Blocks Antivirus Updates
A security researcher just released a clever tool called BigDiskBuster that can block Microsoft Defender updates, leaving your antivirus stuck in limbo. This sneaky proof-of-concept allows anyone to prevent Defender from getting the latest signature and platform updates, as long as the tool is running in the background.
CISA Warns of Active Exploits in Zyxel Switch Vulnerability
A high-severity vulnerability in Zyxel GS1900 series switches is under active attack, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to issue a directive for federal agencies to patch the flaw and prevent data theft. This urgent warning highlights the vulnerability's potential impact on enterprise and agency environments.