Zero-Day Vulnerabilities

Network SecurityVulnerabilitiesZero-Day Vulnerabilities

24 Sep 20263 mins

Cisco patches max-severity ISE flaw, the second critical zero-day this week

Network SecurityVulnerabilitiesZero-Day Vulnerabilities

18 Sep 20263 mins

ConnectWise patches critical ScreenConnect authentication failure after five days

By Maxwell Cooter

12 Sep 20262 mins

Network SecurityRemote Access SecurityZero-Day Vulnerabilities

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

9 Sep 20269 mins

Articles

Patch Tuesday August 2026 : A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability

The WinSock fix is one of the 398 patches issued today by Microsoft, and SAP’s fix for a vulnerability in Commerce Cloud is one of 29 patches this month.

12 Aug 2026 7 mins

Patch Tuesday roundup: Microsoft fixes a monthly record 569 holes; SAP patches a critical memory corruption bug

The huge Microsoft release likely reflects how good AI has become at helping vendors find vulnerabilities, says one expert.

15 Jul 2026 11 mins

GreatXML zero-day BitLocker bypass doesn’t seem to work, yet

Researcher’s feud with Microsoft continues to escalate with new Windows zero-day flaw that an experience vulnerability expert says doesn’t work as advertised.

Endpoint ProtectionWindows SecurityZero-Day Vulnerabilities

13 Jun 2026 5 mins

Oracle PeopleSoft zero‑day fuels ShinyHunters extortion spree

Attackers leveraged a critical unauthenticated RCE bug to breach higher‑ed institutions, deploy stealth remote access tools, and publish stolen data.

By Shweta Sharma

12 Jun 2026 4 mins

Business IntelligenceWindows SecurityZero-Day Vulnerabilities

June Patch Tuesday marks a ‘new normal’ with over 200 CVEs, 32 rated ‘critical’

AI discovery is unleashing the flood of zero days and other CVEs, so enterprises should prepare for larger Patch Tuesdays in future.

By John E. Dunn

11 Jun 2026 6 mins

Microsoft feud escalates as researcher drops new Windows zero-day

Exploit code for Defender bug published post-Patch Tuesday, reviving clash over uncoordinated disclosure practices.

By Shweta Sharma

10 Jun 2026 4 mins

Microsoft patches two zero-day flaws in Defender

CISA has added the Microsoft Malware Protection Engine and Microsoft Defender Antimalware Platform vulnerabilities to its KEV catalog, suggesting exploitation in the wild.

Endpoint ProtectionWindows SecurityZero-Day Vulnerabilities

22 May 2026 3 mins

Microsoft is working on a patch for 'YellowKey' attack on Bitlocker, offers temporary fix

Exploitation requires physical access, so enterprises should look to their device security policies.

By Maxwell Cooter

21 May 2026 4 mins

EncryptionWindows SecurityZero-Day Vulnerabilities

Exchange Server zero-day vulnerability can be triggered by opening a malicious email

Already being exploited, this is a ‘mitigate right now’ emergency, says one expert.

Communications SecurityEmail SecurityZero-Day Vulnerabilities

16 May 2026 6 mins

Linux kernel maintainers suggest a ‘kill switch’ to protect systems until a zero-day vulnerability is patched

One Linux vendor likes the idea, but analysts and users view it as a two-edged sword.

12 May 2026 6 mins

Google discovers weaponized zero-day exploits created with AI

The 2FA bypass exploit stemmed from a faulty trust assumption, providing evidence of AI reasoning that can discover high-level logic flaws.

CyberattacksCybercrimeZero-Day Vulnerabilities

11 May 2026 4 mins

April Patch Tuesday roundup: Zero day vulnerabilities and critical bugs

This month’s threat landscape is ‘defined by immediate, real-world exploitation rather than just theoretical vulnerabilities,’ says an incident response manager.

15 Apr 2026 10 mins