zero-Day

APT group exploited Output Messenger Zero-Day to target Kurdish military operating in IraqAPT group exploited Output Messenger Zero-Day to target Kurdish military operating in Iraq

APT group exploited Output Messenger Zero-Day to target Kurdish military operating in Iraq

A Türkiye-linked group used an Output Messenger zero-day to spy on Kurdish military targets in Iraq, collecting user data since…

2 weeks ago
SonicWall fixed SMA 100 flaws that could be chained to execute arbitrary codeSonicWall fixed SMA 100 flaws that could be chained to execute arbitrary code

SonicWall fixed SMA 100 flaws that could be chained to execute arbitrary code

SonicWall addressed three SMA 100 flaws, including a potential zero-day, that could allow remote code execution if chained. SonicWall patches…

2 weeks ago
Play ransomware affiliate leveraged zero-day to deploy malwarePlay ransomware affiliate leveraged zero-day to deploy malware

Play ransomware affiliate leveraged zero-day to deploy malware

The Play ransomware gang exploited a high-severity Windows Common Log File System flaw in zero-day attacks to deploy malware. The Play…

2 weeks ago
Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324<gwmw style="display:none;"></gwmw>Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324<gwmw style="display:none;"></gwmw>

Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324<gwmw style="display:none;"></gwmw>

Threat actors launch second wave of attacks on SAP NetWeaver, exploiting webshells from a recent zero-day vulnerability. In April, ReliaQuest…

3 weeks ago
Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024

Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024

Google tracked 75 zero-day flaws exploited in 2024, down from 98 in 2023, according to its Threat Intelligence Group's latest…

4 weeks ago
SAP NetWeaver zero-day allegedly exploited by an initial access brokerSAP NetWeaver zero-day allegedly exploited by an initial access broker

SAP NetWeaver zero-day allegedly exploited by an initial access broker

A zero-day in SAP NetWeaver is potentially being exploited, putting thousands of internet-facing applications at risk. Researchers warn that a…

4 weeks ago
Hertz disclosed a data breach following 2024 Cleo zero-day attackHertz disclosed a data breach following 2024 Cleo zero-day attack

Hertz disclosed a data breach following 2024 Cleo zero-day attack

Hertz Corporation disclosed a data breach after customer data was stolen via Cleo zero-day exploits in late 2024, affecting Hertz,…

1 month ago
Google fixed two actively exploited Android zero-daysGoogle fixed two actively exploited Android zero-days

Google fixed two actively exploited Android zero-days

Google addressed 62 vulnerabilities with the release of Android 's April 2025 security update, including two actively exploited zero-days. Google…

2 months ago
Zero-day broker Operation Zero offers up to $4 million for Telegram exploitsZero-day broker Operation Zero offers up to $4 million for Telegram exploits

Zero-day broker Operation Zero offers up to $4 million for Telegram exploits

Russian zero-day broker Operation Zero is looking for exploits for the popular messaging app Telegram, offering up to $4 million…

2 months ago
Microsoft Patch Tuesday security updates for March 2025 fix six actively exploited zero-daysMicrosoft Patch Tuesday security updates for March 2025 fix six actively exploited zero-days

Microsoft Patch Tuesday security updates for March 2025 fix six actively exploited zero-days

Microsoft Patch Tuesday security updates for March 2025 address 56 security vulnerabilities in its products, including six actively exploited zero-days.…

2 months ago