Lyrie
← Home

#zero-day

40 stories tagged.

CVE-2026-31431: Linux CopyFail LPE — Real-Time Autonomous Patching Across 500+ Production Servers

9 min · 3 sources

The First AI-Generated Zero-Day: Google's GTIG Report Confirms LLMs Have Crossed the Weaponization Threshold

10 min · 0 sources

Burning the Perimeter: CVE-2026-0300 — Unauthenticated Root RCE in Palo Alto PAN-OS Actively Exploited

11 min · 0 sources

When Prompts Become Shells: CVE-2026-25592 & CVE-2026-26030 Prove AI Agent Frameworks Are the New OS — And They Have Root Bugs

10 min · 0 sources

The Firewall That Opened the Door: CVE-2026-0300 and the State-Sponsored Operation Hiding Inside Your Perimeter

10 min · 0 sources

The Defender's Dilemma: CVE-2026-32202 NTLM Zero-Click, BlueHammer, RedSun, and UnDefend — Windows' Most Dangerous Fortnight in Years

11 min · 0 sources

Credential Chain Detonation: How CVE-2026-6973 Turns Ivanti EPMM's January Breach Into a May Ambush

9 min · 0 sources

The Firewall That Opened the Door: CVE-2026-0300 PAN-OS Captive Portal Zero-Day Under Active State-Sponsored Exploitation

10 min · 0 sources

CVE-2026-0300: The PAN-OS Captive Portal Zero-Day That Handed State Actors the Keys to the Kingdom

9 min · 0 sources

CVE-2026-41940: The cPanel Zero-Day That Owned 1.5 Million Servers Before the Patch Existed

11 min · 0 sources

The Firewall Flipped: CVE-2026-0300 Turns PAN-OS Captive Portal Into a State-Sponsored Entry Point

11 min · 0 sources

The Device Manager Is Compromised: Ivanti EPMM's Five-CVE Zero-Day Bundle and the January Credential Domino

10 min · 0 sources

The Theoretical Is Now Real: 10 In-the-Wild Indirect Prompt Injection Payloads and the Agentic AI Kill Chain

10 min · 0 sources

Root on the Perimeter: CVE-2026-0300 — The PAN-OS Captive Portal Zero-Day Being Exploited by State Actors Right Now

11 min · 0 sources

Firewall as Entry Point: CVE-2026-0300 PAN-OS Captive Portal RCE and the State-Sponsored Campaign That Moved First

10 min · 0 sources

The Master Key to 1.5 Million Servers: CVE-2026-41940 and the cPanel CRLF Authentication Bypass

10 min · 0 sources

Your Firewall Is the Exploit: CVE-2026-0300 Grants Root RCE on Palo Alto PA-Series via Captive Portal Buffer Overflow — No Patch Yet

10 min · 0 sources

The Ghost Root: CVE-2026-41940 Gave Attackers Admin on 1.5 Million cPanel Servers — for Two Months Before Anyone Knew

9 min · 0 sources

When Defender Becomes the Door: The BlueHammer / RedSun / UnDefend Trilogy and the Systemic Attack on Windows Endpoint Protection

9 min · 0 sources

The Watershed Moment: Claude Mythos, Project Glasswing, and the Era of AI-Autonomous Vulnerability Discovery

9 min · 0 sources

The Management Plane Falls: CVE-2026-41940, the cPanel CRLF Authentication Bypass Silently Exploited for Two Months Across 1.5 Million Servers

11 min · 0 sources

The Key to 70 Million Kingdoms: CVE-2026-41940 — cPanel/WHM CRLF Auth Bypass Exploited as Zero-Day

9 min · 0 sources

CVE-2024-55591: Fortinet FortiOS Authentication Bypass — CVSS 9.6 CISA KEV

1 min · 0 sources

CVE-2025-32756: Fortinet FortiVoice Stack Overflow RCE — CVSS 9.6 Zero-Day

1 min · 0 sources

CVE-2025-2783: Google Chrome Sandbox Escape — Actively Exploited Zero-Day

1 min · 0 sources

CVE-2025-26633: Windows MMC Zero-Day Security Feature Bypass — Exploited by EncryptHub

1 min · 0 sources

CVE-2025-22457: Ivanti Connect Secure Stack Overflow RCE — China-Nexus APT Exploitation

1 min · 0 sources

CVE-2025-29824: Windows CLFS Driver Zero-Day — Used by Ransomware Operators

1 min · 0 sources

CVE-2025-21333: Windows Hyper-V NT Kernel Privilege Escalation — Zero-Day Exploited

1 min · 0 sources

CVE-2025-24201: Apple WebKit Out-of-Bounds Write — Actively Exploited in the Wild

1 min · 0 sources

CVE-2025-24200: Apple iOS USB Restricted Mode Bypass — Actively Exploited

1 min · 0 sources

CVE-2025-21391: Windows Storage Elevation of Privilege — February 2025 Zero-Day

1 min · 0 sources

CVE-2025-21418: Windows Ancillary Function Driver Privilege Escalation — Zero-Day Exploited

1 min · 0 sources

CVE-2025-0282: Ivanti Connect Secure Pre-Auth RCE — Actively Exploited (CVSS 9.0)

1 min · 0 sources

The 136-Day Invisible Exploit: CVE-2026-34621's Prototype Pollution Turned Adobe's JavaScript Sandbox Into a Lie

10 min · 0 sources

Open the PDF, Own the Machine: CVE-2026-34621's Four-Month Silent Zero-Day in Adobe Acrobat

9 min · 0 sources

The Endpoint Manager Is the Breach: FortiClient EMS CVE-2026-35616 and the Double Zero-Day Siege on Enterprise Endpoint Security

10 min · 0 sources

The Network Spine Is the Weapon: Cisco SD-WAN's 7-CVE Kill Chain and the Nation-State Actor Behind It

12 min · 0 sources

The Chaotic Eclipse Trilogy: BlueHammer, RedSun, and UnDefend — When Researcher Frustration Becomes Nation-State Ammunition

10 min · 0 sources

Fortinet's Endpoint Manager Is an Open Door: The Double Zero-Day Assault on FortiClient EMS (CVE-2026-35616 + CVE-2026-21643)

10 min · 0 sources