15 verified briefings on Zero Day. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
A series of high-impact security incidents, including a mail server zero-day, poisoned npm packages, and a fake AI repository, highlight a dangerous trend. Attackers are exploiting single points of failure in software supply chains and cloud infrastructure to launch widespread, cascading attacks.
A high-severity zero-day vulnerability in the KnowledgeDeliver Learning Management System was actively exploited by attackers. The flaw, caused by hard-coded keys, allowed them to install the Godzilla web shell and deploy Cobalt Strike for further network access. The vulnerability has since been patched.
A busy week in security saw major flaws discovered in Google Chrome, UniFi network devices, and macOS. These vulnerabilities expose users and businesses to data theft, remote attacks, and network takeovers, requiring immediate attention.
This week's security landscape saw the discovery of new Linux vulnerabilities and a zero-day flaw in Microsoft Defender. The incidents highlight ongoing risks from unpatched systems and complex supply chains. Additionally, old bugs resurfaced, and phishing attacks have become more targeted, posing a continued threat.
A security researcher is threatening to publicly release another zero-day exploit for Microsoft Windows, escalating a dispute with the company. The threat puts pressure on Microsoft and creates a potential security risk for all Windows users, pending the company's response or the exploit's public disclosure.
Microsoft is advocating for Coordinated Vulnerability Disclosure, urging researchers to report issues privately. The statement follows a public dispute where a security researcher disclosed multiple zero-day vulnerabilities, leading to a debate on platform governance and responsible disclosure ethics.
Microsoft has released its largest-ever security update, fixing 206 vulnerabilities. The patch addresses three publicly known zero-day flaws and dozens of critical bugs that could allow remote code execution, requiring immediate attention from IT teams.
Google's June 2026 Android update addresses 124 security flaws. One vulnerability, a high-severity privilege escalation bug in the Framework component (CVE-2025-48595), is being actively exploited in the wild. The flaw allows attackers to gain higher privileges on a device without any user interaction.
Google's Mandiant team has detailed a critical zero-day vulnerability in the KnowledgeDeliver Learning Management System. The flaw, caused by insecure deserialization, allows unauthenticated attackers to achieve remote code execution on affected servers. The LMS is widely used in Japan, making this a significant regional security issue.
Oracle has patched a critical zero-day flaw in its PeopleSoft software that was actively used by hackers for data theft. The vulnerability allowed attackers to run code remotely without needing a password.
A critical flaw in Check Point's enterprise VPNs is being actively used by the Qilin ransomware gang. The vulnerability allows attackers to steal credentials and access corporate networks, requiring immediate patching and investigation.
A researcher released a proof-of-concept exploit for a new Windows zero-day vulnerability named 'MiniPlasma'. The exploit allows an attacker with local access to gain the highest system privileges on fully patched Windows 10 and 11 machines. Microsoft has not yet released a patch.
A security researcher has released a proof-of-concept exploit for a new Windows zero-day vulnerability called MiniPlasma. The exploit can grant full SYSTEM privileges on fully patched Windows 11 systems. The flaw is reportedly an unfixed version of a bug Microsoft claimed to have patched in 2020.
A security researcher has released a proof-of-concept for a new zero-day vulnerability in Windows, codenamed MiniPlasma. The flaw affects fully patched systems and allows an attacker to gain the highest level of system privileges. The vulnerability exists in the Windows Cloud Files Mini Filter Driver.
A new zero-day vulnerability in Microsoft Exchange, identified as CVE-2026-42897, is being actively exploited. The flaw is a cross-site scripting (XSS) issue that allows attackers to compromise Outlook Web Access (OWA) mailboxes. Microsoft has not yet released a patch to fix the vulnerability.