Do Son Discover the details of the recent KDDI data breach. Hackers stole over 12 million email addresses and millions of passwords. Learn how to protect yourself.
Zero-Day Vulnerability
A new Microsoft Defender zero day exploit leaks online, exposing a severe race condition vulnerability affecting fully patched Windows installations.
Urgent: Millions affected by "nginx-poolslip," a critical Nginx 1.31.0 zero-day that bypasses ASLR via heap feng shui to grant unauthenticated remote RCE.
Details and PoC code for the "MiniPlasma" zero-day exploit are now public. See how a 6-year-old flaw grants SYSTEM access on fully patched Windows 11.
Google uncovers DarkSword, a sophisticated iOS full-chain exploit used globally to deploy spyware via zero-day vulnerabilities. Update to iOS 26.3 now.
CVE-2025-31324 in SAP NetWeaver is under active attack. A critical zero-day flaw allows unauthenticated file uploads and remote code execution.
CVE-2025-31324 lets attackers exploit SAP NetWeaver to upload webshells and deploy C2 tools like Brute Ratel, affecting patched enterprise systems.
Learn how the Google Zero-Day Vulnerability is actively exploited, prompting critical updates from Google, Apple, and Microsoft.
Discover the concerning campaign targeting Fortinet FortiGate firewalls. Learn how threat actors exploited vulnerabilities and established unauthorized access.
Critical zero-day vulnerability in Microsoft Windows: Attackers can compromise user accounts by simply viewing malicious files.
A critical zero-day vulnerability has been identified in Alibaba's Nacos platform, a widely used open-source tool for dynamic service
chip design giant Arm has disclosed a critical zero-day vulnerability (CVE-2024-4610) actively being exploited in the wild
The zero-day flaw, CVE-2023-47246, resides in SysAid on-premises software, allowing hackers to execute arbitrary code on vulnerable systems
In the ever-evolving landscape of cybersecurity, Apple has taken swift action against a zero-day security vulnerability
Blasty shared a Github page hosting PoC for the vulnerability in Lexmark Printer that allows attacker to take control of the affected device