Tag: zero day
367 articles
Patching Speed Falls Behind as AI-Generated Exploits Rise
The clock is ticking faster than ever: AI can now turn software patches into working exploits in under an hour, shattering the old assumption that reverse-engineers had weeks to spare. Anthropic's Claude Mythos Preview has already proven its mettle, converting 18 Firefox patches into 8 code-execution exploits at alarming speed.
SonicWall VPN flaws exploited to install custom malware
A threat actor known as UTA0533 has been exploiting two zero-day vulnerabilities in SonicWall SMA1000 Secure Mobile Access appliances to install custom malware, starting as early as June 22, 2026. This attack uses a critical server-side request forgery and a high-severity command injection vulnerability to gain unauthorized access.
AI-Assisted Phishing Toolkit Exposed in WebDAV Malware Campaign
Meet the AI-assisted phishing toolkit that was left wide open, complete with 1,048 files, including testing notes and live delivery logs - a rare glimpse into a hacker's playbook. The exposed repository revealed a sophisticated operation, even down to a hardcoded path pointing to an open-source AI coding tool.
7-Zip Flaw Exposes Systems to Code Execution Risk
A newly discovered flaw in 7-Zip, tracked as CVE-2026-14266, leaves systems vulnerable to code execution attacks, allowing hackers to execute code in the context of the current process. Fortunately, a fix is available in 7-Zip version 26.02, which patches the heap-based buffer overflow issue.
ServiceNow Vulnerability Exploited in Wild Attacks
A critical vulnerability, CVE-2026-6875, in the ServiceNow AI Platform is being exploited in wild attacks, allowing unauthenticated hackers to execute remote code and escape the sandbox. This flaw affects a widely-used enterprise platform that powers over 100,000 AI apps at 85% of Fortune 500 companies.
SonicWall SMA Zero-Days Exploited to Gain Root Access
A newly identified threat actor, UTA0533, has been caught exploiting zero-day vulnerabilities in SonicWall SMA VPN appliances to gain root access, using custom malware and other sophisticated tactics. This alarming attack was uncovered during an incident response in July, with two compromised appliances detected in a single environment.
Siemens ROX II Zero-Days Expose Critical Infrastructure Risks
Our research team, in close collaboration with Siemens, uncovered a critical vulnerability chain of three zero-day exploits in Siemens ROX II operational-technology switches, posing significant risks to critical infrastructure security. This chained exploit could allow attackers to escalate from basic reconnaissance to full root-level control.
Windows Zero-Day Exploit LegacyHive Grants Hackers Admin Privileges
A security researcher, known as Nightmare Eclipse, has uncovered a new Windows zero-day exploit called LegacyHive, which can grant hackers admin privileges with just a few simple steps and some standard user credentials. This alarming vulnerability targets the Windows User Profile Service, putting users at risk of serious security breaches.
CISA Flags Exploited SharePoint Zero-Day Vulnerability
Don't wait until it's too late: Federal agencies have until July 19, 2026, to patch a critical Microsoft SharePoint Server vulnerability, CVE-2026-58644, that's already being exploited by hackers to execute malicious code remotely. This high-severity flaw, with a CVSS score of 9.8, could allow attackers to take control of your SharePoint Server if left unpatched.
Private 5G Networks Expose Government to Hidden Security Risks
Government agencies and military organizations risk exposing themselves to hidden security threats if they don't adopt a zero-trust approach to their private 5G networks, leaving them vulnerable to potentially devastating attacks. Without proper security measures in place, adversaries could gain unrestricted access to sensitive information and wreak havoc.
Attackers Exploit Zero-Days in SonicWall Appliances
Cyber attackers are exploiting two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, in SonicWall appliances, with ransomware attacks seemingly their ultimate goal. Rapid7's team has thwarted attempts at data exfiltration and encryption, but the threat remains.
Vulnerabilities in UEFI Shims Expose Secure Boot Bypass Risk
Thousands of systems may be at risk of a Secure Boot bypass due to vulnerabilities in 11 UEFI shim bootloaders, all signed by Microsoft, that allow attackers to circumvent security measures. These weaknesses have the potential to create a broad attack surface, putting many devices at risk of compromise.
AI-Powered Tool Discovers Zero-Day in WordPress Plugin
Meet the AI-powered tool that just discovered a zero-day vulnerability in a popular WordPress plugin, and learn how its automated pipeline can detect and exploit weaknesses in code. This game-changing technology can extract sensitive data, like password hashes and secret tokens, from live databases.
Microsoft Faces New Zero-Day Exploit Disclosure Amid Ongoing Security Dispute
A security researcher has unveiled a proof-of-concept exploit, called LegacyHive, that targets a vulnerability in Windows User Profile Service, allowing for a potential elevation of privileges. This newly disclosed exploit requires just a standard user credential and a third username to launch.
Microsoft Disrupts 570 Security Flaws in Record Patch Tuesday Release
Microsoft just dropped a record-breaking Patch Tuesday update, fixing a whopping 570 security flaws - nearly triple the number from last month - with nearly 60 of them rated critical, allowing attackers to take remote control of your Windows device with ease. This massive update, powered by AI-driven vulnerability discoveries, also patched three zero-day vulnerabilities already being exploited in the wild.
CISA Warns of Actively Exploited SharePoint Flaws
Don't let your SharePoint servers become an easy target: over 800 Internet-exposed servers remain unpatched against actively exploited vulnerabilities, including CVE-2026-32201 and CVE-2026-45659. Act now to protect your systems from potential attacks.
SonicWall Zero-Days Exploited, Enable Admin Command Execution
SonicWall is urging immediate action to fix two zero-day vulnerabilities in its Secure Mobile Access (SMA) 1000 series appliances, which are being actively exploited by attackers to execute admin-level commands. These critical flaws, tracked as CVE-2026-15409 and CVE-2026-15410, could compromise your system's security if not patched right away.
Microsoft Unveils Record-Breaking 622 Vulnerabilities in Massive Patch Update
Get ready for the bug apocalypse - Microsoft just dropped a massive Patch Tuesday update, fixing a record-breaking 622 vulnerabilities in one fell swoop! This behemoth of a patch tackles 416 Windows defects, 82 in Office, and 46 in Microsoft Edge, with 63 critical issues that demand immediate attention.
SonicWall Disrupts Zero-Day Attacks with Urgent Patch for SMA1000 Flaws
SonicWall has issued a critical patch to combat zero-day attacks exploiting two vulnerabilities in its SMA1000 line, with attackers already taking advantage of these flaws in the wild. The company urges immediate action to prevent further damage from these actively exploited security gaps.
Claude for Chrome Flaw Exposes Gmail, Google Docs to Rogue Extensions
A security flaw in Claude for Chrome could put your Gmail, Google Docs, and Calendar at risk of being accessed by rogue extensions, with researchers rating the vulnerability as high-severity. A simple script with just six lines of code can trick the extension into treating a fake click as a genuine user action.
Microsoft Bolsters Windows 10 Security with KB5099539 Update
Microsoft just released a major security update for Windows 10, packed with fixes for a whopping 570 vulnerabilities, including some that were already being exploited by hackers. The KB5099539 update is a crucial security boost for Windows 10 users, with no new features but essential bug fixes and protection.
Microsoft Patch Tuesday Disrupts 570 Flaws, Fixes 3 Zero-Days
Microsoft just dropped a massive Patch Tuesday update, tackling a record-breaking 570 security flaws, including three zero-day vulnerabilities that hackers were exploiting or had publicly disclosed. This critical update is a must-apply to keep your systems safe.
Progress Confirms Zero-Day Flaw Behind ShareFile Shutdown
A critical zero-day flaw allowed hackers to access sensitive files, write malicious content, and map server files - prompting Progress Software to urgently shut down ShareFile Storage Zone Controller Windows servers to protect customer data. The emergency move came after a credible external security threat was flagged, temporarily disabling access to all affected ShareFile accounts.
Vulnerability Management Lagging Behind AI-Driven Exploit Boom
The threat landscape is evolving at breakneck speed, with a new vulnerability emerging every 7.4 minutes and AI-driven tools slashing the time it takes to turn these vulnerabilities into active threats. As a result, traditional vulnerability management strategies are struggling to keep pace with the sheer volume and velocity of attacks.