A Framework for Detection and Classification of Attacks on Surveillance Cameras under IoT Networks

The increasing use of Internet of Things IoT devices has led to a rise in security related concerns regarding IoT Networks. The surveillance cameras in IoT networks are vulnerable to security threats such as brute force and zero-day attacks which can lead to unauthorized access by hackers and...

CVE-2024-28988

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing...

CVE-2025-57775

creationtimestamp| type| source ---|---|--- 2025-09-02 20:44:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxuyatkrbh27 2025-09-04 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-888/...

CVE-2025-57774

creationtimestamp| type| source ---|---|--- 2025-09-02 20:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxuxz5ywjj2z 2025-09-04 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-887/...

Hackers Exploit CrushFTP Zero-Day to Take Over Servers

WatchTowr Labs uncovers a zero-day exploit CVE-2025-54309 in CrushFTP. The vulnerability lets hackers gain admin access via the…...

FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available

The Sangoma FreePBX Security Team has issued an advisory warning about an actively exploited FreePBX zero-day vulnerability that impacts systems with an administrator control panel ACP exposed to the public internet. FreePBX is an open-source private branch exchange PBX platform widely used by...

Agentic Discovery and Validation of Android App Vulnerabilities

Existing Android vulnerability detection tools overwhelm teams with thousands of low-signal warnings yet uncover few true positives. Analysts spend days triaging these results, creating a bottleneck in the security pipeline. Meanwhile, genuinely exploitable vulnerabilities often slip through,...

CVE-2025-43284

creationtimestamp| type| source ---|---|--- 2025-08-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-878/...

CVE-2025-7775: Critical NetScaler vulnerability exploited in-the-wild

Overview On August 26, 2025, Citrix published a security bulletin for three new vulnerabilities affecting NetScaler ADC and NetScaler Gateway. Of the three vulnerabilities disclosed, the vendor has indicated that CVE-2025-7775 has been exploited in-the-wild by an as-yet unknown threat actor. As...

Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability

This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw exists within the configuration of the system shadow file. The issue results from a blank password...

CVE-2024-13087

creationtimestamp| type| source ---|---|--- 2025-08-26 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-871/...

CVE-2025-44002

creationtimestamp| type| source ---|---|--- 2025-08-26 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-872/...

⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More

Cybersecurity today moves at the pace of global politics. A single breach can ripple across supply chains, turn a software flaw into leverage, or shift who holds the upper hand. For leaders, this means defense isn't just a matter of firewalls and patches—it's about strategy. The strongest...

A week in security (August 18 – August 24)

Last week on Malwarebytes Labs: Clickjack attack steals password managers’ secrets Grok chats show up in Google searches All Apple users should update after company patches zero-day vulnerability in all platforms Google settles YouTube lawsuit over kids’ privacy invasion and data collection...

PT-2025-34562 · Undefined · Undefined

🔥 Android under fire: Two high-severity bugs — CVE-2025-38805 and CVE-2025-38806 — have entered exploit kits. Attackers adapt quickly; don’t be the easy target. Details: https://t.co/tej1yYGlw1 Created by AI. Android ZeroDay...

CVE-2025-8610

AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The specific fla...

All Apple users should update after company patches zero-day vulnerability in all platforms

Apple has released security updates for iPhones, iPads and Macs to fix a zero-day vulnerability a vulnerability which Apple was previously unaware of that is reportedly being used in targeted attacks. The updates cover: iOS 18.6.2 and iPadOS 18.6.2 iPhone XS and later, iPad Pro 13-inch, iPad Pro...

CVE-2025-9325

creationtimestamp| type| source ---|---|--- 2025-08-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-867/ 2025-09-03 01:10:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvh4dxqbk2c...

CVE-2025-9328

creationtimestamp| type| source ---|---|--- 2025-08-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-864/ 2025-09-03 01:12:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvha6w5ix2n...

CVE-2025-9329

creationtimestamp| type| source ---|---|--- 2025-08-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-863/ 2025-09-03 01:23:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvht34fxe2v...