Vulnerabilities
The exploited flaw allows attackers to overwrite files outside the repository, leading to remote code execution.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Zero-Day"
Vulnerabilities
The Chrome zero-day does not have a CVE and it's unclear who reported it and which browser component it affects.
Vulnerabilities
Microsoft has addressed a Windows vulnerability exploited as zero-day that allows attackers to obtain System privileges.
Mobile & Wireless
Google warns that two out of the 107 vulnerabilities patched in Android this month have been exploited in limited, targeted attacks.
Vulnerabilities
CVE-2025-61757 is an unauthenticated remote code execution vulnerability affecting Oracle Identity Manager.
Vulnerabilities
An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system.
Vulnerabilities
The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor.
Vulnerabilities
Amazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days.
Vulnerabilities
Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products.
Malware & Threats
Threat actors exploited CVE-2025-21042 to deliver malware via specially crafted images to users in the Middle East.
Vulnerabilities
The threat actor behind Operation ForumTroll used the same toolset typically employed in Dante spyware attacks.
Mobile & Wireless
Questions have been raised over the technical viability of the purported WhatsApp exploit, but the researcher says he wants to keep his identity private.
Vulnerabilities
The bug has been exploited in the wild as a zero-day and the US cybersecurity agency CISA has added it to its KEV catalog.
Vulnerabilities
Hundreds of internet-exposed Oracle E-Business Suite instances may still be vulnerable to attacks.
Vulnerabilities
The Medusa ransomware operators exploited the GoAnywhere MFT vulnerability one week before patches were released.
Data Breaches
Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882.
Vulnerabilities
Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM.
Vulnerabilities
Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot.
Nation-State
Google’s Threat Intelligence Group and Mandiant link the BrickStorm campaign to UNC5221, warning that hackers are analyzing stolen code to weaponize zero-day vulnerabilities.
Network Security
The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user.
Vulnerabilities
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
Artificial Intelligence
Email Security
Artificial Intelligence
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Malware & Threats
Artificial Intelligence
