Cybersecurity
Cisco Issues Critical SD-WAN Security Warning
Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks th
#zero-day
20 articles
Cybersecurity
Windows 11 and Edge Exploited at Pwn2Own Berlin 2026
On the first day of Pwn2Own Berlin 2026, security researchers collected $523,000 in cash awards after exploiting 24 unique zero-days. [...]
Cybersecurity
CISA Issues Urgent Patch Order for Active Windows Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited
Cybersecurity
Microsoft Defender Zero-Days Under Active Attack
Huntress is warning that threat actors are exploiting three recently disclosed security flaws in Microsoft Defender to gain elevated privileges in compromised s
Cybersecurity
Critical Security Threats Surge: Defender Flaw, Excel Exploit
You know that feeling when you open your feed on a Thursday morning and it's just... a lot? Yeah. This week delivered. We've got hackers getting creative in way
Cybersecurity
CISA Orders Federal Agencies to Patch Critical Microsoft Defender Flaw
CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has been exploited in zero-day attacks.
Cybersecurity
Microsoft Patches 169 Vulnerabilities in Major Security Update
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has b
Cybersecurity
Critical PDF Zero-Day and State Infrastructure Threats Emerge
Monday is back, and the weekend’s backlog of chaos is officially hitting the fan. We are tracking a critical zero-day that has been quietly living in
Cybersecurity
Critical Vulnerabilities Expose Popular Software to Active Attacks
This week had real hits. The key software got tampered with. Active bugs showed up in the tools people use every day. Some attacks didn’t ev
Science & Tech
Adobe Patches Critical PDF Vulnerability Exploited Since November
It's not clear how many people were compromised by this hacking campaign, but a security researcher said the hackers were targeting victims since at least Novem
Cybersecurity
Windows Zero-Days Under Active Exploitation
Threat actors are exploiting three recently disclosed Windows security vulnerabilities in attacks aimed at gaining SYSTEM or elevated administrator permissions.
Cybersecurity
Microsoft Defender Zero-Day Exploit Escalates to SYSTEM Privileges
A researcher known as "Chaotic Eclipse" has published a proof-of-concept exploit for a second Microsoft Defender zero-day, dubbed "RedSun," in the past two week
Cybersecurity
China-Linked Hackers Exploit Zero-Days to Deploy Medusa Ransomware
A China-based threat actor known for deploying Medusa ransomware has been linked to the weaponization of a combination of zero-day and N-day vulnerabilitie
Cybersecurity
Microsoft Patches 167 Vulnerabilities in April Security Update
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a Shar
Cybersecurity
Microsoft Patches Windows 10 With Critical April 2026 Security Update
Microsoft has released the Windows 10 KB5082200 extended security update to fix the April 2026 Patch Tuesday vulnerabilities, including 2 zero-days. [...]
Cybersecurity
Microsoft Patches 167 Vulnerabilities in April 2026 Update
Today is Microsoft's April 2026 Patch Tuesday with security updates for 167 flaws, including 2 zero-day vulnerabilities. [...]
Cybersecurity
Anthropic's Claude Mythos Uncovers Thousands of Zero-Day Vulnerabilities
Artificial Intelligence (AI) company Anthropic announced a new cybersecurity initiative called Project Glasswing that will use a preview ver
Cybersecurity
Adobe Patches Critical Acrobat Reader Zero-Day Flaw
Adobe has released an emergency security update for Acrobat Reader to fix a vulnerability, tracked as CVE-2026-34621, that has been exploited in zero-day attack
Cybersecurity
Adobe Reader Zero-Day Actively Exploited via Malicious PDFs
Threat actors have been exploiting a previously unknown zero-day vulnerability in Adobe Reader using maliciously crafted PDF documents since at least December&n
Cybersecurity
Adobe Reader Zero-Day Under Active Exploit Since December
Attackers have been exploiting a zero-day vulnerability in Adobe Reader using maliciously crafted PDF documents since at least December. [...]