#zero-day


KnowledgeDeliver flaw exploited as a zero-day to install web shells

May 27, 2026 // 00:38

Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. The flaw is […]

Trend Micro warns of Apex One zero-day exploited in the wild

May 22, 2026 // 16:56

Japanese cybersecurity software company Trend Micro has addressed an Apex One zero-day vulnerability exploited in attacks targeting Windows systems. Apex One is Trend Micro’s enterprise-grade […]

Microsoft shares mitigation for YellowKey Windows zero-day

May 20, 2026 // 13:57

Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grants access to protected drives. The security flaw was disclosed last […]

New Windows ‘MiniPlasma’ zero-day exploit gives SYSTEM access, PoC released

May 18, 2026 // 10:17

A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed “MiniPlasma” that lets attackers gain SYSTEM privileges on fully patched […]

Microsoft warns of Exchange zero-day flaw exploited in attacks

May 15, 2026 // 12:56

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site scripting […]

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

May 15, 2026 // 00:17

Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed attackers to […]

Windows BitLocker zero-day gives access to protected drives, PoC released

May 13, 2026 // 19:56

A cybersecurity researcher has published proof-of-concept (PoC) exploits for two unpatched Microsoft Windows vulnerabilities named YellowKey and GreenPlasma, which are a BitLocker bypass and a […]

Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation

May 12, 2026 // 00:08

Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence […]

Google: Hackers used AI to develop zero-day exploit for web admin tool

May 11, 2026 // 16:17

Researchers at Google Threat Intelligence Group (GTIG) say that a zero-day exploit targeting a popular open-source web administration tool was likely generated using AI. The exploit […]

CISA gives feds four days to patch Ivanti flaw exploited as zero-day

May 8, 2026 // 15:16

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. federal agencies four days to secure their networks against a high-severity vulnerability in Ivanti […]

Previous 1 … 8 9 10 11 12 13 Next