Vulnerabilities
Less than half of the total zero-days have been attributed to a threat actor, but spyware vendors and China are in the lead.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Zero-Day"
Mobile & Wireless
An integer overflow or wraparound in the Qualcomm graphics component, the bug leads to memory corruption.
Malware & Threats
Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.
Malware & Threats
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware.
Malware & Threats
GTIG and Mandiant said the zero-day tracked as CVE-2026-22769 has been exploited by UNC6201 since at least 2024.
Vulnerabilities
A Chrome 145 update fixes CVE-2026-2441, a vulnerability that can likely be exploited for arbitrary code execution.
Vulnerabilities
Impacting the ‘dyld’ system component, the memory corruption issue can be exploited for arbitrary code execution.
Vulnerabilities
Microsoft’s Patch Tuesday updates fix roughly 60 vulnerabilities found in the company’s products.
Vulnerabilities
Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access.
Vulnerabilities
The critical-severity vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely.
Vulnerabilities
Tracked as CVE-2026-24858, the bug allows attackers to log into devices registered to other FortiCloud accounts.
Vulnerabilities
The vulnerability is tracked as CVE-2026-21509 and it can be exploited to bypass security features.
Vulnerabilities
Cisco has released patches for CVE-2026-20045, a critical vulnerability that can be exploited for unauthenticated remote code execution.
Vulnerabilities
Two vulnerabilities patched this month by Microsoft were disclosed publicly before fixes were released.
Vulnerabilities
Fresh attacks targeted three VMware ESXi vulnerabilities that were disclosed in March 2025 as zero-days.
Malware & Threats
The critical-severity vulnerability allows unauthenticated, remote attackers to execute arbitrary shell commands.
Vulnerabilities
The critical-severity bug in the Fireware OS’s iked process leads to unauthenticated remote code execution.
Vulnerabilities
The medium-severity flaw has been exploited in combination with a critical bug for remote code execution.
Malware & Threats
The critical zero-day is tracked as CVE-2025-20393 and it impacts Secure Email Gateway and Secure Email and Web Manager appliances.
Vulnerabilities
Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack.
Vulnerabilities
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
Artificial Intelligence
Email Security
Artificial Intelligence
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Malware & Threats
Artificial Intelligence
