← Home
#zero-day
40 stories tagged.
CVE-2026-31431: Linux CopyFail LPE — Real-Time Autonomous Patching Across 500+ Production Servers
9 min · 3 sources
The First AI-Generated Zero-Day: Google's GTIG Report Confirms LLMs Have Crossed the Weaponization Threshold
10 min · 0 sources
Burning the Perimeter: CVE-2026-0300 — Unauthenticated Root RCE in Palo Alto PAN-OS Actively Exploited
11 min · 0 sources
When Prompts Become Shells: CVE-2026-25592 & CVE-2026-26030 Prove AI Agent Frameworks Are the New OS — And They Have Root Bugs
10 min · 0 sources
The Firewall That Opened the Door: CVE-2026-0300 and the State-Sponsored Operation Hiding Inside Your Perimeter
10 min · 0 sources
The Defender's Dilemma: CVE-2026-32202 NTLM Zero-Click, BlueHammer, RedSun, and UnDefend — Windows' Most Dangerous Fortnight in Years
11 min · 0 sources
Credential Chain Detonation: How CVE-2026-6973 Turns Ivanti EPMM's January Breach Into a May Ambush
9 min · 0 sources
The Firewall That Opened the Door: CVE-2026-0300 PAN-OS Captive Portal Zero-Day Under Active State-Sponsored Exploitation
10 min · 0 sources
CVE-2026-0300: The PAN-OS Captive Portal Zero-Day That Handed State Actors the Keys to the Kingdom
9 min · 0 sources
CVE-2026-41940: The cPanel Zero-Day That Owned 1.5 Million Servers Before the Patch Existed
11 min · 0 sources
The Firewall Flipped: CVE-2026-0300 Turns PAN-OS Captive Portal Into a State-Sponsored Entry Point
11 min · 0 sources
The Device Manager Is Compromised: Ivanti EPMM's Five-CVE Zero-Day Bundle and the January Credential Domino
10 min · 0 sources
The Theoretical Is Now Real: 10 In-the-Wild Indirect Prompt Injection Payloads and the Agentic AI Kill Chain
10 min · 0 sources
Root on the Perimeter: CVE-2026-0300 — The PAN-OS Captive Portal Zero-Day Being Exploited by State Actors Right Now
11 min · 0 sources
Firewall as Entry Point: CVE-2026-0300 PAN-OS Captive Portal RCE and the State-Sponsored Campaign That Moved First
10 min · 0 sources
The Master Key to 1.5 Million Servers: CVE-2026-41940 and the cPanel CRLF Authentication Bypass
10 min · 0 sources
Your Firewall Is the Exploit: CVE-2026-0300 Grants Root RCE on Palo Alto PA-Series via Captive Portal Buffer Overflow — No Patch Yet
10 min · 0 sources
The Ghost Root: CVE-2026-41940 Gave Attackers Admin on 1.5 Million cPanel Servers — for Two Months Before Anyone Knew
9 min · 0 sources
When Defender Becomes the Door: The BlueHammer / RedSun / UnDefend Trilogy and the Systemic Attack on Windows Endpoint Protection
9 min · 0 sources
The Watershed Moment: Claude Mythos, Project Glasswing, and the Era of AI-Autonomous Vulnerability Discovery
9 min · 0 sources
The Management Plane Falls: CVE-2026-41940, the cPanel CRLF Authentication Bypass Silently Exploited for Two Months Across 1.5 Million Servers
11 min · 0 sources
The Key to 70 Million Kingdoms: CVE-2026-41940 — cPanel/WHM CRLF Auth Bypass Exploited as Zero-Day
9 min · 0 sources
CVE-2024-55591: Fortinet FortiOS Authentication Bypass — CVSS 9.6 CISA KEV
1 min · 0 sources
CVE-2025-32756: Fortinet FortiVoice Stack Overflow RCE — CVSS 9.6 Zero-Day
1 min · 0 sources
CVE-2025-2783: Google Chrome Sandbox Escape — Actively Exploited Zero-Day
1 min · 0 sources
CVE-2025-26633: Windows MMC Zero-Day Security Feature Bypass — Exploited by EncryptHub
1 min · 0 sources
CVE-2025-22457: Ivanti Connect Secure Stack Overflow RCE — China-Nexus APT Exploitation
1 min · 0 sources
CVE-2025-29824: Windows CLFS Driver Zero-Day — Used by Ransomware Operators
1 min · 0 sources
CVE-2025-21333: Windows Hyper-V NT Kernel Privilege Escalation — Zero-Day Exploited
1 min · 0 sources
CVE-2025-24201: Apple WebKit Out-of-Bounds Write — Actively Exploited in the Wild
1 min · 0 sources
CVE-2025-24200: Apple iOS USB Restricted Mode Bypass — Actively Exploited
1 min · 0 sources
CVE-2025-21391: Windows Storage Elevation of Privilege — February 2025 Zero-Day
1 min · 0 sources
CVE-2025-21418: Windows Ancillary Function Driver Privilege Escalation — Zero-Day Exploited
1 min · 0 sources
CVE-2025-0282: Ivanti Connect Secure Pre-Auth RCE — Actively Exploited (CVSS 9.0)
1 min · 0 sources
The 136-Day Invisible Exploit: CVE-2026-34621's Prototype Pollution Turned Adobe's JavaScript Sandbox Into a Lie
10 min · 0 sources
Open the PDF, Own the Machine: CVE-2026-34621's Four-Month Silent Zero-Day in Adobe Acrobat
9 min · 0 sources
The Endpoint Manager Is the Breach: FortiClient EMS CVE-2026-35616 and the Double Zero-Day Siege on Enterprise Endpoint Security
10 min · 0 sources
The Network Spine Is the Weapon: Cisco SD-WAN's 7-CVE Kill Chain and the Nation-State Actor Behind It
12 min · 0 sources
The Chaotic Eclipse Trilogy: BlueHammer, RedSun, and UnDefend — When Researcher Frustration Becomes Nation-State Ammunition
10 min · 0 sources
Fortinet's Endpoint Manager Is an Open Door: The Double Zero-Day Assault on FortiClient EMS (CVE-2026-35616 + CVE-2026-21643)
10 min · 0 sources