#zero-day


New Linux ‘Dirty Frag’ zero-day gives root on all major distros

May 8, 2026 // 11:57

A new Linux zero-day vulnerability, named Dirty Frag, allows local attackers to gain root privileges on most major Linux distributions with a single command. Security […]

Ivanti warns of new EPMM flaw exploited in zero-day attacks

May 7, 2026 // 18:36

Ivanti warned customers today to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) exploited in zero-day attacks. The security flaw (tracked […]

Palo Alto Networks firewall zero-day exploited for nearly a month

May 7, 2026 // 14:16

Palo Alto Networks warned customers that suspected state-sponsored hackers have been exploiting a critical-severity PAN-OS firewall zero-day vulnerability for nearly a month. Tracked as CVE-2026-0300, […]

Palo Alto Networks warns of firewall RCE zero-day exploited in attacks

May 6, 2026 // 12:36

Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks. Also known as […]

Critical cPanel and WHM bug exploited as a zero-day, PoC now available

May 1, 2026 // 00:17

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts […]

CISA orders feds to patch Windows flaw exploited as zero-day

Apr 29, 2026 // 13:57

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. Tracked […]

CISA orders feds to patch Windows flaw exploited as zero-day

Apr 29, 2026 // 13:37

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. Tracked […]

CISA orders feds to patch BlueHammer flaw exploited as zero-day

Apr 23, 2026 // 14:16

CISA has given U.S. government agencies two weeks to secure their Windows systems against a Microsoft Defender privilege escalation vulnerability that has been exploited in […]

New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges

Apr 17, 2026 // 01:17

A researcher known as “Chaotic Eclipse” has published a proof-of-concept exploit for a second Microsoft Defender zero-day, dubbed “RedSun,” in the past two weeks, protesting […]

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

Apr 15, 2026 // 11:50

Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 […]

Previous 1 … 9 10 11 12 13 Next