#zero-click

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

Sep 8, 2026 // 14:59

Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among […]

Critical Avada WordPress theme flaw enables zero-click RCE

Aug 27, 2026 // 00:57

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the […]

Russian hackers exploit Zimbra zero-click flaw for email theft

Jul 23, 2026 // 19:56

CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by […]

Zero-Click Threat: FreeScout Vulnerability Allows Unauthenticated Server Takeover via Email

Mar 4, 2026 // 12:36

A critical zero-click Remote Code Execution (RCE)vulnerability, tracked as CVE-2026-28289, has been identified in the open-source helpdesk platform FreeScout. With a maximum CVSS score of 10.0, this flaw allows […]