A Linux Kernel Local-Root Bug Has Public Exploit Code and No Merged Fix, After Zero Day Initiative Reports Reached Public Mailing Lists
ZDI-CAN-33367 lets a local Linux user write into root-owned...
Browse Tag
Zero-Day
14 Articles
A Suspected China-Nexus Group Used a BeyondTrust Remote Support Zero-Day in August, and Patching Will Not Undo a Compromise
BeyondTrust says a suspected China-nexus group exploited...
Microsoft Fixes a Record 1,413 Vulnerabilities in October, and Only One Is Known to Be Under Attack
Microsoft’s October 2026 Patch Tuesday fixed a record 1,413...
Ivanti Says It Fixed Part of a Connect Secure Flaw in July and Was Still Backporting When Attackers Struck
Volexity says attackers chained three Ivanti Connect Secure...
Attackers Are Exploiting an Unpatched FortiMail Flaw, and CISA Wants Agencies to Act by October 4
Fortinet says attackers are exploiting CVE-2026-104286, a...
DIVD Says Two Zammad Zero-Days Let an AI Agent Climb From Session Hijack to Root in Seconds
Dutch nonprofit DIVD says two Zammad zero-days, CVE-2026-102489...
Attackers Exploit a Hex-Encoding Bypass in Cisco SD-WAN Manager, and CISA Sets an October 3 Deadline
Cisco says attackers are exploiting CVE-2026-76504, a CVSS 9.8...
Apple Patches a Meta-Reported CoreGraphics Zero-Day Possibly Exploited in Targeted iOS Attacks
Apple fixed CVE-2026-86950, an out-of-bounds write in...
Citrix Confirms Attackers Exploited Two NetScaler Zero-Days Before a Patch Existed
Citrix says two critical NetScaler flaws were already being...
CISA Orders Federal Agencies to Patch a Critical F5 BIG-IP Zero-Day by September 25
F5 patched an already-exploited BIG-IP APM zero-day and narrowed...