zero-click exploit Archives • Daily CyberSecurity

Pegasus Spyware Hits Serbian Student Activist via Zero-Click iMessage

Pegasus spyware zero-click iMessage infection on a Serbian student activist iPhone, part of the largest documented surveillance wave in Serbia

Pegasus Spyware Hits Serbian Student Activist via Zero-Click iMessage

Do Son September 8, 2026

Pegasus spyware infected a Serbian activist through a zero-click iMessage exploit, part of Serbia's largest spyware wave. Update iOS now.

Publicly Disclosed: Bishop Fox Reveals Critical Pre-Auth SQL Injection in FortiClient EMS FortiSandbox Vulnerability Unauthenticated RCE FortiClient EMS Vulnerability CVE-2026-21643 FortiClient EMS Vulnerability CVE-2026-21643 CVE-2023-34992 - CVE-2023-37936 Fortinet Vulnerabilities CVE-2025-64155

FortiSandbox Vulnerability Unauthenticated RCE FortiClient EMS Vulnerability CVE-2026-21643 FortiClient EMS Vulnerability CVE-2026-21643 CVE-2023-34992 - CVE-2023-37936 Fortinet Vulnerabilities CVE-2025-64155

Publicly Disclosed: Bishop Fox Reveals Critical Pre-Auth SQL Injection in FortiClient EMS

Do Son March 17, 2026

Bishop Fox publicly disclosed details of a critical 9.1 CVSS zero-click SQL injection in FortiClient EMS (CVE-2026-21643). Patch to 7.4.5 immediately.

Root Access for All: Critical Auth Bypass Hits Cisco Firewall Management Center Cisco Secure FMC CVE-2026-20079 Cisco RCE, Firewall Vulnerability Cisco Nexus, vulnerability CVE-2024-20412 - Cisco data breach

Cisco Secure FMC CVE-2026-20079 Cisco RCE, Firewall Vulnerability Cisco Nexus, vulnerability CVE-2024-20412 - Cisco data breach

Root Access for All: Critical Auth Bypass Hits Cisco Firewall Management Center

Do Son March 5, 2026

A critical 10.0 CVSS zero-click flaw (CVE-2026-20079) in Cisco Secure FMC gives unauthenticated attackers root access. Patch your systems immediately.

The Pixel 9 Zero-Click Exploit Chain That Breaks the Kernel Android zero day flaw June 2026 security bulletin RuTaxi Trojan Android Banking Malware Pixel 9 zero-click exploit, Dolby UDC vulnerability CVE-2025-54957 NexusRoute Android RAT, India E-Challan Phishing ClayRat Self-Defense, Android Accessibility Abuse Android Trojan, AntiDot Android Malware "BadPack"

Android zero day flaw June 2026 security bulletin RuTaxi Trojan Android Banking Malware Pixel 9 zero-click exploit, Dolby UDC vulnerability CVE-2025-54957 NexusRoute Android RAT, India E-Challan Phishing ClayRat Self-Defense, Android Accessibility Abuse Android Trojan, AntiDot Android Malware "BadPack"

The Pixel 9 Zero-Click Exploit Chain That Breaks the Kernel

Do Son January 19, 2026

Google Project Zero uncovers a zero-click exploit on Pixel 9 in Jan 2026. Hackers can hijack the kernel via silent audio messages. Patch now!

Pegasus Spyware Creator NSO Group Acquired by US Firm for “Tens of Millions” NSO Group Acquisition, Pegasus Spyware

Pegasus Spyware Creator NSO Group Acquired by US Firm for “Tens of Millions”

Do Son October 11, 2025

The US-sanctioned NSO Group, maker of Pegasus spyware, was acquired by an American investment firm for "tens of millions." The deal will keep operations in Israel but may lift sanctions.

New Zero-Click iPhone Exploit “NICKNAME” Targeted High-Profile Individuals Across the US and EU iMessage Vulnerability, Zero-Click Exploit NICKNAME vulnerability

iMessage Vulnerability, Zero-Click Exploit NICKNAME vulnerability

New Zero-Click iPhone Exploit “NICKNAME” Targeted High-Profile Individuals Across the US and EU

Do Son June 6, 2025

iVerify uncovered "NICKNAME," a zero-click iMessage vulnerability linked to state-sponsored surveillance on high-value targets in the US & EU, now patched.

Zero-Click HomeKit Exploit Used to Spy on Serbian Journalists HomeKit zero-click exploit

Zero-Click HomeKit Exploit Used to Spy on Serbian Journalists

Do Son December 16, 2024

Learn about the alarming zero-click exploit in Apple's HomeKit feature used to compromise iPhones of Serbian journalists and activists.