15 stories tagged zero-day, newest first.
227 points by cubefox | 98 comments
AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.
342 points by beardyw | 229 comments
Techdirt article by Karl Bode criticizing Meta's agentic AI product Muse for privacy and security failures, including a zero-day flaw and harmful autonomous actions.
97 points by pavel_lishin | 40 comments
Ars Technica article reporting a serious zero-day vulnerability in Meta's Muse AI assistant, including a ClickFix attack that can hijack the agent.
779 points by negura | 473 comments
NVD vulnerability detail page for CVE-2026-85046, reportedly an actively exploited sandbox remote code execution flaw affecting Chromium.
410 points by Synthetic7346 | 192 comments
Mindgard blog post disclosing an unpatched Cursor IDE flaw where a malicious git.exe in a workspace root is executed automatically without user interaction.
918 points by binyu | 364 comments
GitHub repository 'exploitarium' archiving public exploit PoCs and writeups for reportedly unreported vulnerabilities in software like 7-Zip, AnyDesk, c-ares, Docker, FFmpeg, and Firefox.
464 points by possibilistic | 218 comments
Tom's Hardware news article reporting that GitHub banned a security researcher who posted Windows zero-day exploits and threatened further retaliation against Microsoft.
363 points by idoxer | 206 comments
Google Chrome Releases blog post announcing a Stable channel desktop update (145.0.7632.75/76) that fixes CVE-2026-2441, a CSS zero-day exploited in the wild.
757 points by spenvo | 391 comments
Washington Post article reporting a global hacking campaign exploiting a Microsoft SharePoint vulnerability that hit U.S. federal and state agencies.
586 points by zielmicha | 184 comments
Sean Heelan's blog post describing how he used OpenAI's o3 model to discover CVE-2025-37899, a remote zero-day in the Linux kernel's SMB (ksmbd) implementation.
386 points by airstrike | 222 comments
Ars Technica article on Operation Triangulation, a four-year campaign that backdoored iPhones of Kaspersky employees using an exploit abusing a secret hardware feature.
512 points by mikece | 231 comments
Google Threat Analysis Group blog post describing 0-day exploits used by a commercial surveillance vendor to target users in Egypt, found with Citizen Lab.
393 points by benhawkes | 194 comments
Isosceles blog post analyzing the WebP zero-day vulnerability (libwebp heap buffer overflow) exploited in the wild.
1375 points by ericzawo | 766 comments
Citizen Lab report on BLASTPASS, an NSO Group zero-click, zero-day iPhone exploit chain found in the wild, prompting Apple security updates.
339 points by LinuxBender | 104 comments
KrebsOnSecurity article reporting that Barracuda is telling customers to physically replace, rather than patch, Email Security Gateway appliances hit by a zero-day.