Zero-Day Botnet Attack Detection in IoV: a Modular Approach Using Isolation Forests and Particle Swarm Optimization

The Internet of Vehicles IoV is transforming transportation by enhancing connectivity and enabling autonomous driving. However, this increased interconnectivity introduces new security vulnerabilities. Bot malware and cyberattacks pose significant risks to Connected and Autonomous Vehicles CAVs, ...

Google Introduces Agentic AI to Combat Cybersecurity Threats

Google enhances cybersecurity with Agentic AI, launching Unified Security to fight zero-day exploits, enterprise threats, and credential-based attacks.…...

CVE-2024-21113

creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-257/...

CVE-2025-3887

creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-267/ 2025-05-22 01:43:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17227 2025-05-22 05:05:26+00:00| seen|...

CVE-2025-2759

creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-268/ 2025-05-22 01:42:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17215...

CVE-2024-34099

creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-258/...

CVE-2024-34098

creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-259/...

Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products

Google has revealed that it observed 75 zero-day vulnerabilities exploited in the wild in 2024, down from 98 in 2023 but an increase from 63 the year before. Of the 75 zero-days, 44% of them targeted enterprise products. As many as 20 flaws were identified in security software and appliances...

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

On Thursday, April 24, enterprise resource planning company SAP published a CVE and a day later, an advisory behind login for CVE-2025-31324, a zero-day vulnerability in NetWeaver Visual Composer that carries a CVSSv3 score of 10. The vulnerability arises from a missing authorization check in...

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

On Thursday, April 24, enterprise resource planning company SAP published a CVE and a day later, an advisory behind login for CVE-2025-31324, a zero-day vulnerability in NetWeaver Visual Composer that carries a CVSSv3 score of 10. The vulnerability arises from a missing authorization check in...

Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zero-day attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities -...

New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework

Threat actors are likely exploiting a new vulnerability in SAP NetWeaver to upload JSP web shells with the goal of facilitating unauthorized file uploads and code execution. "The exploitation is likely tied to either a previously disclosed vulnerability like CVE-2017-9844 or an unreported remote...

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

Cybersecurity researchers are warning about a new malware called DslogdRAT that's installed following the exploitation of a now-patched security flaw in Ivanti Connect Secure ICS. The malware, along with a web shell, were "installed by exploiting a zero-day vulnerability at that time,...

CVE-2025-3485

creationtimestamp| type| source ---|---|--- 2025-04-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-254/...

CVE-2025-3486

creationtimestamp| type| source ---|---|--- 2025-04-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-255/ 2025-05-22 01:42:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17216...

CVE-2025-3881

creationtimestamp| type| source ---|---|--- 2025-04-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-247/ 2025-05-22 01:43:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17226 2025-05-22 05:15:26+00:00| seen|...

CVE-2025-3882

creationtimestamp| type| source ---|---|--- 2025-04-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-248/ 2025-05-22 01:43:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17225 2025-05-22 05:10:26+00:00| seen|...

CVE-2025-3885

creationtimestamp| type| source ---|---|--- 2025-04-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-251/ 2025-05-22 01:42:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17222...

CVE-2025-3884

creationtimestamp| type| source ---|---|--- 2025-04-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-250/ 2025-05-22 01:43:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17223...

Zero Day Quest 2025: $1.6 million awarded for vulnerability research

This month, the Microsoft Security Response Center recently welcomed some of the world’s most talented security researchers at Microsoft’s Zero Day Quest, the largest live hacking competition of its kind. The inaugural event challenged the security community to focus on the highest-impact securit...