zero-day

Cisco discloses critical SD-WAN zero-day exploited in attacks

Cisco on Wednesday disclosed a critical zero-day vulnerability in its Catalyst SD-WAN Manager software that attackers are actively exploiting to gain administrator-level access to affected systems without any credentials.

Citrix NetScaler zero-day attacks escalate to mass exploitation

Two critical zero-day vulnerabilities in Citrix NetScaler ADC and Gateway products have escalated from targeted espionage operations into widespread, opportunistic attacks, as threat actors race to exploit tens of thousands of unpatched devices worldwide.

Cisco ISE zero-day with max severity score exploited in the wild

Cisco on Wednesday disclosed a maximum-severity authentication bypass vulnerability in its Identity Services Engine that attackers are already exploiting, prompting the U.S. Cybersecurity and Infrastructure Security Agency to order federal agencies to patch within three days.

Four spy groups exploit same Chrome, Windows zero-days

At least four espionage-motivated hacking groups, most with suspected ties to Chinese state intelligence, have been caught using the same exploit kit to compromise Google Chrome Alphabet Inc. and Microsoft Windows in a rapid-fire campaign that began in late August…

Russian hackers deploy Exchange backdoor that survives password resets

A Russia-aligned cyber espionage group known as Laundry Bear has been exploiting a vulnerability in Microsoft Exchange's webmail interface to compromise government agencies and private sector organizations across the United States and Europe, deploying a browser-based backdoor that can survive…

Microsoft confirms work on patch for Defender zero-day

Microsoft has formally acknowledged a privilege escalation vulnerability in the Microsoft Malware Protection Engine, now tracked as CVE-2026-50656 with a CVSS score of 7.8, and said it is developing a security update to address the flaw. The vulnerability, publicly referred…

New zero-day hits Windows Defender hours after record Patch Tuesday

Hours after Microsoft released its largest-ever Patch Tuesday update on Tuesday, a security researcher known as Nightmare Eclipse published a new proof-of-concept exploit called RoguePlanet that grants SYSTEM-level privileges on fully patched Windows 10 and Windows 11 systems through a…