Email Security
Russia-linked APT28 has been exploiting mail server vulnerabilities against government and defense entities since September 2023.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Zero-Day"
Malware & Threats
Google bundles multiple safeguards under a single Android toggle to protect high-risk users from advanced mobile malware implants.
Vulnerabilities
Fortinet has patched a dozen vulnerabilities, including a critical flaw exploited in the wild against FortiVoice instances.
Vulnerabilities
Ivanti has released patches for two EPMM vulnerabilities that have been chained in the wild for remote code execution.
Malware & Threats
Patch Tuesday: Microsoft patches at least 70 security bugs and flagged five zero-days in the “exploitation detected” category.
Nation-State
A Turkey-affiliated espionage group has exploited a zero-day vulnerability in Output Messenger since April 2024.
Vulnerabilities
Hundreds of SAP NetWeaver instances hacked via a zero-day that allows remote code execution, not only arbitrary file uploads, as initially believed.
Vulnerabilities
SonicWall patches three SMA 100 vulnerabilities, including a potential zero-day, that could be chained to execute arbitrary code remotely.
Ransomware
At least two ransomware groups exploited the Windows zero-day CVE-2025-29824 before it was patched by Microsoft.
Vulnerabilities
Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability.
Mobile & Wireless
Android’s May 2025 security update includes patches for an exploited vulnerability in the FreeType open source rendering engine.
Vulnerabilities
Commvault provides indicators of compromise and mitigation guidance after a zero-day exploit targeting its Azure environment lands in CISA’s KEV catalog.
Vulnerabilities
Pwn2Own participants demonstrated exploits against VMs, AI, browsers, servers, containers, and operating systems.
Incident Response
Vulnerabilities
Malware & Threats
Cloud Security
VMware patches flaws that expose users to data leakage, command execution and denial-of-service attacks. No temporary workarounds available.
Threat Intelligence
Cybersecurity Funding
Cybersecurity Funding
