Zero-Day Vulnerabilities | News, how-tos, features, reviews, and videos
Attackers are exploiting a critical authentication bypass in Cisco Catalyst SD-WAN Manager to access its API as an administrator.
The WinSock fix is one of the 398 patches issued today by Microsoft, and SAP’s fix for a vulnerability in Commerce Cloud is one of 29 patches this month.
The huge Microsoft release likely reflects how good AI has become at helping vendors find vulnerabilities, says one expert.
Researcher’s feud with Microsoft continues to escalate with new Windows zero-day flaw that an experience vulnerability expert says doesn’t work as advertised.
Attackers leveraged a critical unauthenticated RCE bug to breach higher‑ed institutions, deploy stealth remote access tools, and publish stolen data.
AI discovery is unleashing the flood of zero days and other CVEs, so enterprises should prepare for larger Patch Tuesdays in future.
Exploit code for Defender bug published post-Patch Tuesday, reviving clash over uncoordinated disclosure practices.
CISA has added the Microsoft Malware Protection Engine and Microsoft Defender Antimalware Platform vulnerabilities to its KEV catalog, suggesting exploitation in the wild.
Exploitation requires physical access, so enterprises should look to their device security policies.
Already being exploited, this is a ‘mitigate right now’ emergency, says one expert.
One Linux vendor likes the idea, but analysts and users view it as a two-edged sword.
The 2FA bypass exploit stemmed from a faulty trust assumption, providing evidence of AI reasoning that can discover high-level logic flaws.
This month’s threat landscape is ‘defined by immediate, real-world exploitation rather than just theoretical vulnerabilities,’ says an incident response manager.
According to the most recent Foundry Security Priorities study, security leaders are managing increasingly complex identity environments while trying to improve their organizations' overall security posture.
The post Managing modern identity complexity and reducing executive risk appeared first on Whitepaper Repository -.