zero-day Archives • Daily CyberSecurity

Chrome Moves to a Two-Week Release Cycle Starting with Chrome 153 Chrome two-week release cycle starting with Chrome 153 across desktop and mobile

Chrome two-week release cycle starting with Chrome 153 across desktop and mobile

Chrome Moves to a Two-Week Release Cycle Starting with Chrome 153

Do Son September 9, 2026

Honoring a promise made this March, Google has formally announced a more intensive update cadence for its...

Chrome 153 Patches Zero-Day CVE-2026-87491 Exploited in the Wild Chrome zero-day CVE-2026-87491 V8 flaw exploited in the wild patched in Chrome 153 stable update

Chrome zero-day CVE-2026-87491 V8 flaw exploited in the wild patched in Chrome 153 stable update

Chrome 153 Patches Zero-Day CVE-2026-87491 Exploited in the Wild

Do Son September 9, 2026

TL;DR Google released Chrome 153 to fix 230 security flaws. One is a Chrome zero-day, CVE-2026-87491, already...

September 2026 Patch Tuesday Fixes 2 Exploited Windows Zero-Days Patch Tuesday zero-day CVE-2026-81963 and CVE-2026-85880 Windows elevation of privilege flaws exploited in the wild

Patch Tuesday zero-day CVE-2026-81963 and CVE-2026-85880 Windows elevation of privilege flaws exploited in the wild

September 2026 Patch Tuesday Fixes 2 Exploited Windows Zero-Days

Do Son September 8, 2026

TL;DR Microsoft’s September 2026 Patch Tuesday fixes 996 vulnerabilities. Two of them are zero-days already exploited in...

CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild N-able N-central pre-auth remote code execution vulnerability CVE-2026-86218 exploited in the wild against RMM servers

N-able N-central pre-auth remote code execution vulnerability CVE-2026-86218 exploited in the wild against RMM servers

CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild

Do Son September 7, 2026

N-able shipped an emergency hotfix for a maximum-severity flaw in its N-central platform on September 6, 2026....

NightmareEclipse Releases PoCs for Avast, Kaspersky, and NVIDIA Flaws A conceptual image illustrating the NightmareEclipse vulnerabilities targeting Avast, Kaspersky, and NVIDIA software components

A conceptual image illustrating the NightmareEclipse vulnerabilities targeting Avast, Kaspersky, and NVIDIA software components

NightmareEclipse Releases PoCs for Avast, Kaspersky, and NVIDIA Flaws

Do Son September 1, 2026

The infamous NightmareEclipse public vulnerability series recently expanded its scope significantly. It rapidly transcended its initial Windows...

CVE-2026-81578 & CVE-2026-82078: PaperCut Zero-Day Exploited, PoC Public PaperCut vulnerability CVE-2026-82078 zero-day exploit chain executes malicious SQL for remote code execution

PaperCut vulnerability CVE-2026-82078 zero-day exploit chain executes malicious SQL for remote code execution

CVE-2026-81578 & CVE-2026-82078: PaperCut Zero-Day Exploited, PoC Public

Do Son August 31, 2026

TL;DR A PaperCut vulnerability is under active attack. The zero-day is an exploit chain, tracked as CVE-2026-81578...

HardBreacher Exploit Targets Kaspersky Hacker coding the HardBreacher exploit aiming at a Kaspersky Endpoint Security interface process

HardBreacher Exploit Targets Kaspersky

Do Son August 31, 2026

A protective security product can inadvertently transform into a highly vulnerable intrusion point. An independent security researcher...

PaperCut NG/MF vulnerability exploited in the wild shown in the urgent 27 Aug 2026 security advisory

PaperCut NG/MF Vulnerability Exploited in the Wild, Emergency Patch Released

Do Son August 28, 2026

TL;DR PaperCut confirmed a NG/MF vulnerability exploited in the wild on 27 August 2026. The flaw affects...

Public Disclosure: Unpatched Log4j RCE Flaw in FilteredObjectInputStream, No CVE Assigned Log4j vulnerability enabling unauthenticated remote code execution via FilteredObjectInputStream deserialization, publicly disclosed on Apache issue tracker

Log4j vulnerability enabling unauthenticated remote code execution via FilteredObjectInputStream deserialization, publicly disclosed on Apache issue tracker

Public Disclosure: Unpatched Log4j RCE Flaw in FilteredObjectInputStream, No CVE Assigned

Do Son August 26, 2026

Update 3: Piotr Karwasz, a member of the Apache Software Foundation, stated that this alert re-covers an...

Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks Lazarus zero-day exploit code on a screen showing Operation Dream Job fake job offer lure

Lazarus zero-day exploit code on a screen showing Operation Dream Job fake job offer lure

Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks

Do Son August 12, 2026

What happened at a glance Actor or group Lazarus (DPRK-linked), per Check Point Research Activity type Spear-phishing,...

Metabase SQL Injection Zero-Day (CVSS 10) Exploited

Metabase SQL injection zero-day vulnerability CVSS 10 exploited in the wild unauthenticated admin access advisory

Metabase SQL Injection Zero-Day (CVSS 10) Exploited

Do Son August 8, 2026

TL;DR Metabase disclosed a critical SQL injection zero-day rated CVSS 10. An unauthenticated remote attacker can gain...

SmartConsole authentication bypass CVE-2026-16232 in Check Point Security Management Server

Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public

Do Son July 29, 2026

TL;DR Attackers are exploiting a SmartConsole authentication bypass in Check Point management servers. The flaw, CVE-2026-16232, lets...

FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public FastJson RCE vulnerability CVE-2026-16723 remote code execution attacks by industry pie chart across financial services and healthcare

FastJson RCE vulnerability CVE-2026-16723 remote code execution attacks by industry pie chart across financial services and healthcare

FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public

Do Son July 25, 2026

TL;DR A critical FastJson RCE vulnerability, CVE-2026-16723, carries a CVSS score of 9.0. Full technical details and...

SonicWall SMA Zero-Day Chain Roots VPN Appliances and Plants Hidden Malware SonicWall SMA zero-day exploit chain compromising SMA VPN appliances to deploy malware

SonicWall SMA zero-day exploit chain compromising SMA VPN appliances to deploy malware

SonicWall SMA Zero-Day Chain Roots VPN Appliances and Plants Hidden Malware

Do Son July 19, 2026

At a glance Actor / group UTA0533 (Volexity tracking cluster); no nation or identity confirmed Activity type...

SonicWall SMA1000 CVE-2026-15409 (CVSS 10.0) RCE Exploited in the Wild as Public PoC Drops SonicWall SMA1000 vulnerability CVE-2026-15409 remote code execution exploited in the wild

SonicWall SMA1000 vulnerability CVE-2026-15409 remote code execution exploited in the wild

SonicWall SMA1000 CVE-2026-15409 (CVSS 10.0) RCE Exploited in the Wild as Public PoC Drops

Do Son July 16, 2026

TL;DR SonicWall patched a critical SonicWall SMA1000 vulnerability, CVE-2026-15409, on July 14, 2026. Attackers are exploiting it...

Cursor Zero-Day Vulnerability Remains Unpatched After Seven Months Cursor zero day vulnerability exploitation diagram, AI coding assistant security threat analysis

Cursor zero day vulnerability exploitation diagram, AI coding assistant security threat analysis

Cursor Zero-Day Vulnerability Remains Unpatched After Seven Months

Do Son July 15, 2026

The renowned cybersecurity firm Mindgard recently published an expose detailing a high-severity zero-day vulnerability harboring within Cursor,...

LegacyHive: Exploit Code and Full Details Publicly Disclosed for Unpatched Windows Privilege Escalation Flaw LegacyHive exploit public disclosure Windows privilege escalation flaw by Nightmare-Eclipse

LegacyHive exploit public disclosure Windows privilege escalation flaw by Nightmare-Eclipse

LegacyHive: Exploit Code and Full Details Publicly Disclosed for Unpatched Windows Privilege Escalation Flaw

Do Son July 14, 2026

TL;DR A researcher known as Nightmare-Eclipse has published details and proof-of-concept code for LegacyHive, a Windows User...

Microsoft July 2026 Patch Tuesday zero-day vulnerabilities CVE-2026-56155 and CVE-2026-56164

Microsoft July 2026 Patch Tuesday Fixes 570 Flaws, Two Zero-Days Exploited in the Wild

Do Son July 14, 2026

TL;DR Microsoft’s July 2026 Patch Tuesday fixes 570 vulnerabilities, including 57 rated critical and 510 rated important....

Cisco SD-WAN Zero-Day Exploited in Attacks Diagram explaining the Cisco SD-WAN zero-day and CVE-2026-20245 exploitation

Cisco SD-WAN Zero-Day Exploited in Attacks

Do Son June 26, 2026

At a glance Actor: Unknown threat actor Activity Type: Privilege escalation and zero-day exploitation Targets: Service provider...

GreatXML BitLocker Bypass: Public PoC Exploit Disclosed GreatXML BitLocker bypass, Windows Defender vulnerability

GreatXML BitLocker Bypass: Public PoC Exploit Disclosed

Do Son June 11, 2026

A security researcher recently published a dangerous new exploit. Specifically, the details and proof-of-concept for the GreatXML...

Check Point VPN vulnerability exploited in the wild Check Point VPN exploit CVE-2026-50751 zero-day Checkmarx Breach Supply Chain Attack Ivanti EPMM RCE CVE-2026-1281 Modular DS Vulnerability CVE-2026-23550 D-Link RCE Vulnerability CVE-2026-0625 Christmas 2025 GreyNoise Campaign, Japan-Based Initial Access Broker React2Shell Zero-Day, APT Active Exploitation WordPress vulnerability, authentication bypass FreePBX, zero-day Trend Micro Apex One, Remote Code Execution BitoPro Hack, Crypto Theft UNC5337 - CVE-2022-47945 Safe{Wallet} hack Fortinet vulnerability, CVE-2024-21762, FortiGate attack Balloonfly, Play ransomware Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

Check Point VPN Vulnerability Exploited in the Wild with Ransomware Links

Do Son June 8, 2026

Critical Authentication Bypass Threatens Remote Access Deployments A serious security warning has been issued for corporate virtual...

Weekly Threat Intelligence: June 1 to June 7, 2026 Weekly Threat Intelligence Vulnerability Management Report

Weekly Threat Intelligence: June 1 to June 7, 2026

Do Son June 8, 2026

Welcome to your latest weekly threat intelligence briefing. The global cybersecurity landscape remains highly volatile as we...