CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a high-severity security flaw impacting Broadcom VMware Tools and VMware Aria Operations to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation in the wild. The vulnerability in...

CVE-2025-12486

creationtimestamp| type| source ---|---|--- 2025-10-30 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-980/ 2025-11-06 21:50:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ykawca6x2s...

CVE-2025-12489

creationtimestamp| type| source ---|---|--- 2025-10-30 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-983/...

CVE-2025-10934

creationtimestamp| type| source ---|---|--- 2025-10-29 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-978/ 2025-11-04 21:11:18+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m4th4x2mde2i 2025-11-19 18:56:53+00:00| seen|...

Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware

The zero-day exploitation of a now-patched security flaw in Google Chrome led to the distribution of an espionage-related tool from Italian information technology and services provider Memento Labs, according to new findings from Kaspersky. The vulnerability in question is CVE-2025-2783 CVSS scor...

Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware

The zero-day exploitation of a now-patched security flaw in Google Chrome led to the distribution of an espionage-related tool from Italian information technology and services provider Memento Labs, according to new findings from Kaspersky. The vulnerability in question is CVE-2025-2783 CVSS scor...

Attention Augmented GNN RNN-Attention Models for Advanced Cybersecurity Intrusion Detection

In this paper, we propose a novel hybrid deep learning architecture that synergistically combines Graph Neural Networks GNNs, Recurrent Neural Networks RNNs, and multi-head attention mechanisms to significantly enhance cybersecurity intrusion detection capabilities. By leveraging the comprehensiv...

CVE-2025-61759

creationtimestamp| type| source ---|---|--- 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-957/...

CVE-2025-20359

creationtimestamp| type| source ---|---|--- 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-966/ 2026-02-13 18:33:26+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116064754433006900...

CVE-2025-61677

creationtimestamp| type| source ---|---|--- 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-965/...

Mem3nt0 mori – The Hacking Team is back!

In March 2025, Kaspersky detected a wave of infections that occurred when users clicked on personalized phishing links sent via email. No further action was required to initiate the infection; simply visiting the malicious website using Google Chrome or another Chromium-based web browser was...

Important: p7zip

Issue Overview: This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handlin...

Rapid7 at Pwn2Own: Raising the Bar in Vuln Intel

As the 2025 edition of Pwn2Own Ireland draws to a close, we are taking a beat to reflect on Rapid7’s participation and achievements, both this year and last, in the world of competitive zero day exploit development. Pwn2Own is a zero day exploit competition run by the Zero Day Initiative ZDI and...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0...

Envoy Air (American Airlines) Confirms Oracle EBS 0-Day Breach Linked to Cl0p

Envoy Air American Airlines confirms a breach by CL0P after they exploited the critical CVE-2025-61882 zero-day flaw in Oracle E-Business Suite...

Cyberattack Detection in Critical Infrastructure and Supply Chains

Cyberattack detection in Critical Infrastructure and Supply Chains has become challenging in Industry 4.0. Intrusion Detection Systems IDS are deployed to counter the cyberattacks. However, an IDS effectively detects attacks based on the known signatures and patterns, Zero-day attacks go...

GHSA-6G2V-66CH-6XMH LibreNMS alert-rules has a Cross-Site Scripting Vulnerability

Executive Summary Product: LibreNMS Vendor: LibreNMS Vulnerability Type: Cross-Site Scripting XSS CVSS Score: 4.3 AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L Affected Version: 25.8.0 latest at time of discovery POC File: Download POC Ticket: ZDI-CAN-28105: LibreNMS Alert Rules Cross-Site Scripting...

CVE-2025-11463

creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-954/ 2025-10-29 23:30:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4em3o6xwa2j...

CVE-2025-11464

creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-955/ 2025-10-29 23:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4en6ec2bh2s...

CVE-2025-11465

creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-956/ 2025-10-29 23:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4emb2c7er2k...