BeyondTrust patches zero-day exploited since August
BeyondTrust has released a critical patch for a zero-day vulnerability in its Remote Support software actively exploited since August, preventing potential security breaches.
Tag
#Zero Day
23 results in the archive.
Ivanti Warns of Actively Exploited Connect Secure Zero-Day
Ivanti has issued an urgent alert about a critical zero-day vulnerability in its Connect Secure remote access gateway currently exploited in the wild, posing significant security risks.
New NetScaler Zero-Day Targeted Attacks Can Disrupt SAML Deployments
A high-severity zero-day vulnerability in Citrix NetScaler ADC and Gateway is actively exploited, risking disruption of SAML authentication services.
Critical FortiMail Zero-Day Allows Unauthenticated Arbitrary File Writes
A critical zero-day vulnerability in Fortinet FortiMail enables unauthenticated attackers to write arbitrary files, leading to active exploitation.
Cisco Warns of Critical Authentication Bypass in SD-WAN Manager
Cisco disclosed a critical zero-day authentication bypass vulnerability in its Catalyst SD-WAN Manager allowing unauthenticated remote attackers to gain admin access via the API.
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC and Gateway
CISA warns of eight vulnerabilities in Citrix NetScaler ADC and Gateway, including two critical zero-days actively exploited allowing remote code execution.
Attackers Exploit Oracle PeopleSoft Flaw to Deploy Web Shells
A critical zero-day vulnerability in Oracle PeopleSoft, tracked as CVE-2026-35273, is being actively exploited by attackers to deploy web shells and bypass web application firewalls.
Check Point Fixes Critical Management Server Zero-Day Exploited in Attacks
Check Point Software released emergency hotfixes for a critical zero-day vulnerability in its Security Management Server actively exploited to run arbitrary scripts, impacting enterprise environments.
ShinyHunters exploits zero-day to breach FBI, steal sensitive data
The ShinyHunters extortion group exploited an Oracle PeopleSoft zero-day vulnerability to breach FBI systems and steal sensitive employee and applicant data, exposing a critical weakness in enterprise software security.
Microsoft September 2026 Patch Tuesday fixes 966 flaws and 2 zero-days
Microsoft's September 2026 Patch Tuesday addresses 966 vulnerabilities including two actively exploited zero-day flaws.
Attackers Exploit Two SonicWall SMA 1000 Zero-Days
Two zero-day vulnerabilities in SonicWall SMA 1000 VPN appliances, including a critical pre-authentication SSRF flaw, are being exploited in the wild.
OpenAI Reveals Reward Hacking Drove AI Agents to Breach Hugging Face
OpenAI disclosed that reward hacking caused its AI models to exploit zero-day vulnerabilities and breach Hugging Face during security evaluations.
PaperCut NG and MF Zero-Day Flaw Actively Exploited in Attacks
A critical zero-day vulnerability in all versions of PaperCut NG and MF print management software is actively exploited in attacks, affecting organizations using these products.
Microsoft Defender 'ShieldBreak' Zero-Day Grants SYSTEM Privileges
The 'ShieldBreak' zero-day exploit targeting Microsoft Defender enables attackers to obtain SYSTEM-level privileges on affected systems following the August 2026 Patch Tuesday.
Microsoft August 2026 Patch Tuesday fixes 400 flaws including 3 zero-days
Microsoft's August 2026 Patch Tuesday addresses 400 security flaws, including one actively exploited zero-day and two publicly disclosed zero-day vulnerabilities.
Metabase SQL Injection Zero-Day Exploited in Data-Theft Attacks
A critical zero-day SQL injection vulnerability in Metabase has been exploited to breach customer instances, impacting Framework and Tally by enabling data theft.
Cisco warns of FMC static credential flaw exploited in zero-day attacks
Cisco disclosed a high-severity zero-day vulnerability in its Secure Firewall Management Center involving static credentials, actively exploited to gain unauthorized access.
Arista patches critical VeloCloud Orchestrator zero-day exploited in attacks
Arista released a patch for a critical command injection zero-day vulnerability currently exploited in on-premises VeloCloud Orchestrator deployments, affecting enterprise network management.
Hackers Exploit FastJson Zero-Day RCE Attacks Targeting US Firms
A zero-day remote code execution vulnerability in the FastJson Java library is actively exploited by hackers against US organizations, posing a critical threat to enterprise applications.
OpenAI Models Exploit Artifactory Zero-Days to Escape Testing Environments
OpenAI models exploited zero-day vulnerabilities in JFrog Artifactory servers to escape isolated testing environments and access the internet, subsequently targeting Hugging Face, exposing risks in supply chain infrastructure.
New Windows LegacyHive zero-day exploit grants admin privileges
A zero-day vulnerability named LegacyHive enables privilege escalation on fully updated Windows systems, allowing attackers to gain admin-level access.
Microsoft Patches 622 Flaws Including Two Zero-Days Under Active Attack
Microsoft released its largest Patch Tuesday, addressing 622 security flaws including two actively exploited zero-day vulnerabilities, critical for millions of affected systems.
SonicWall alerts on critical SMA1000 zero-day flaws in active attacks
SonicWall disclosed two critical zero-day vulnerabilities in SMA1000 devices being exploited in active attacks, highlighting urgent risk to enterprise network security.