Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

Google on Wednesday released security updates for the Chrome web browser to address four vulnerabilities, including one that it said has been exploited in the wild. The zero-day vulnerability in question is CVE-2025-10585 , which has been described as a type confusion issue in the V8 JavaScript a...

CVE-2025-43368

creationtimestamp| type| source ---|---|--- 2025-09-18 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-901/ 2025-09-26 22:48:41+00:00| seen| https://gist.github.com/EbonJaeger/172fddcd6ea3906a8f574edf86e204c5 2026-01-21 16:30:13+00:00| seen|...

Update your browser: Security fix for Chrome zero-day CVE-2025-10585

News, Security Update your browser: Security fix for Chrome zero-day CVE-2025-10585 Share September 18th, 2025 Hi everyone! The latest patches to Opera, Opera GX, Opera Air, and Opera for Android address several recent vulnerabilities, including a zero-day exploit CVE-2025-10585. We recommend...

CVE-2025-10585

creationtimestamp| type| source ---|---|--- 2025-09-17 23:21:47+00:00| seen| https://bsky.app/profile/secureblue.dev/post/3lz2y23vazc2f 2025-09-18 03:00:11+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lz3eamyenc2c 2025-09-18 03:49:00+00:00| seen|...

CVE-2025-10644

creationtimestamp| type| source ---|---|--- 2025-09-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-896/ 2025-09-18 01:32:06+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lz37d3ud7l2o...

CVE-2025-10643

creationtimestamp| type| source ---|---|--- 2025-09-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-895/ 2025-09-18 03:02:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lz3edve4ru2m 2025-09-18 23:37:23+00:00| seen|...

CVE-2025-10203

creationtimestamp| type| source ---|---|--- 2025-09-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-894/...

WindowsRegistryRootkit

It is an offensive tool for Windows. This repository contains a kernel rootkit that resides within Windows registry value data, developed by Oleksiuk Dmytro aka Cr4sh. The rootkit exploits a zero-day vulnerability in win32k.sys, a Windows kernel-mode driver, through a buffer overflow in the...

Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks

Samsung has released its monthly security updates for Android, including a fix for a security vulnerability that it said has been exploited in zero-day attacks. The vulnerability, CVE-2025-21043 CVSS score: 8.8, concerns an out-of-bounds write that could result in arbitrary code execution...

Flow-Based Detection and Identification of Zero-Day IoT Cameras

The majority of consumer IoT devices lack mechanisms for administrators to monitor and control them, hindering tailored security policies. A key challenge is identifying whether a new device, especially a streaming IoT camera, has joined the network. We present zCamInspector, a system for...

Microsoft Patch Tuesday, September 2025 Edition

Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known "zero-day" or actively exploited vulnerabilities in this month's bundle from Redmond, which nevertheless includes patches for 13 flaws that earned...

Microsoft and Adobe Patch Tuesday, September 2025 Security Update Review

It's the second Tuesday of September, and Microsoft has rolled out its latest security updates. Microsoft's September 2025 Patch Tuesday has arrived, bringing a fresh wave of security fixes to help organizations stay ahead of evolving threats. Here's a quick breakdown of what you need to know...

CVE-2025-54986

creationtimestamp| type| source ---|---|--- 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review...

A Decade-Long Landscape of Advanced Persistent Threats: Longitudinal Analysis and Global Trends

An advanced persistent threat APT refers to a covert, long-term cyberattack, typically conducted by state-sponsored actors, targeting critical sectors and often remaining undetected for long periods. In response, collective intelligence from around the globe collaborates to identify and trace...

Zero-Day in Sitecore Exploited to Deploy WEEPSTEEL Malware

Hackers exploit a Sitecore zero-day CVE-2025-53690 to deploy WEEPSTEEL Malware via ViewState attacks, enabling Remote Code Execution RCE...

PT-2025-36464

Name of the Vulnerable Software and Affected Versions ABB Terra AC wallbox UL40/80A versions through 1.8.32 ABB Terra AC wallbox UL32A versions through 1.8.2 ABB Terra AC wallbox MID/ CE -Terra AC MID versions through 1.8.32 ABB Terra AC wallbox MID/ CE -Terra AC Juno CE versions through 1.8.32 A...

CVE-2025-8860

creationtimestamp| type| source ---|---|--- 2025-09-04 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-884/...

A Framework for Detection and Classification of Attacks on Surveillance Cameras under IoT Networks

The increasing use of Internet of Things IoT devices has led to a rise in security related concerns regarding IoT Networks. The surveillance cameras in IoT networks are vulnerable to security threats such as brute force and zero-day attacks which can lead to unauthorized access by hackers and...

CVE-2024-28988

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing...

CVE-2025-57775

creationtimestamp| type| source ---|---|--- 2025-09-02 20:44:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxuyatkrbh27 2025-09-04 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-888/...