5439 matches found
Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files
A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...
PT-2025-40895
Critical zero-day vulnerability in Oracle E-Business Suite. Vuln info at SecAlerts: CVE-2021-61882, CVSS 9.8: https://t.co/l5AXE99mx6 ciso cio cto vulnerabilities cybersecurity secalerts msp mssp CVE202561882 oracle https://t.co/HuEuydSF3C...
CVE-2025-11201
creationtimestamp| type| source ---|---|--- 2025-10-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-931/ 2025-10-29 22:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ehvtzlhv2b 2025-11-07 16:45:21+00:00| seen|...
CVE-2025-11202
creationtimestamp| type| source ---|---|--- 2025-10-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-930/ 2025-10-29 22:25:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4eihqy7i32q...
$20 YoLink IoT Gateway Vulnerabilities Put Home Security at Risk
Four critical zero-day flaws found in the $20 YoLink Smart Hub allow remote physical access, threatening your home security. See the urgent steps you must take now...
MALF: A Multi-Agent LLM Framework for Intelligent Fuzzing of Industrial Control Protocols
Industrial control systems ICS are vital to modern infrastructure but increasingly vulnerable to cybersecurity threats, particularly through weaknesses in their communication protocols. This paper presents MALF Multi-Agent LLM Fuzzing Framework, an advanced fuzzing solution that integrates large...
WAFinity---Infinite-Protection-Intelligent-Detection
WAFinity - Infinite Protection, Intelligent Detection WAFin...
Microsoft SharePoint Zero-Day Exploitation: What Public Sector Leaders Should Know
The Rapid7 September 2025 Threat Report highlights active exploitation of a critical Microsoft SharePoint vulnerability, CVE-2025-53770. This zero-day attack is being used by threat actors to gain initial access to victim networks, with exploitation observed in government as well as multiple othe...
⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More
Cybersecurity never stops—and neither do hackers. While you wrapped up last week, new attacks were already underway. From hidden software bugs to massive DDoS attacks and new ransomware tricks, this week's roundup gives you the biggest security moves to know. Whether you're protecting key systems...
Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware
The U.K. National Cyber Security Centre NCSC has revealed that threat actors have exploited the recently disclosed security flaws impacting Cisco firewalls as part of zero-day attacks to deliver previously undocumented malware families like RayInitiator and LINE VIPER. "The RayInitiator and LINE...
Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Directive
Cisco is urging customers to patch two security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software, which it said have been exploited in the wild. The zero-day vulnerabilities in question are...
PT-2025-39388
⚠️ Critical Alert – CVE-2025-78901 • Zero-day in Telerik UI library actively exploited 🚨 • Affects thousands of .NET web apps 2025.3.1 • Mass scanning and ransomware attempts underway • Action: Patch immediately! CyberSecurity ZeroDay Telerik PatchNow NewTalics...
Patch Automation for Browsers with TruRisk™ Eliminate
Recently, CISA added a Chrome zero-day vulnerability, CVE-2025-10585, to its Known Exploited Vulnerabilities KEV Catalog, confirming that threat actors are actively exploiting this high-severity flaw in real-world attacks. This vulnerability affects multiple web browsers that utilize the Chromium...
CVE-2025-10925
creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-914/...
CVE-2025-10924
creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-913/...
CVE-2025-38562
creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-917/ 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-08-03 05:18:00+00:00| seen|...
CVE-2025-10921
creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-910/ 2025-12-04 00:51:21+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m74qx22fv22v 2025-12-13 14:08:41+00:00| seen|...
CVE-2025-10920
creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-909/ 2025-10-30 09:57:13+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m4fp4w3kf22h 2025-10-31 02:16:12+00:00| seen|...