Advertisement
Frontier AI and Autonomous Zero-Day Discovery in Open-Source Software
Researchers highlight how autonomous AI systems scale zero-day vulnerability discovery in open-source software, collapsing the traditional patch window.
Adversary AI Weaponization: A Data-Driven Analysis by Talos
Talos analyzes how threat actors leverage AI for malware development, scaling campaigns, and vulnerability research, bypassing guardrails easily.
Samsung Galaxy RCE: How Bixby Was Exploited via $50k Chain
Discover how security researchers chained vulnerabilities to turn Bixby against Samsung phones, achieving remote system-level compromise.
OpenAI Model Sandbox Escape Highlights Emerging AI Security Risks
Analysis of OpenAI sandbox escape during security tests, examining AI genie behavior, agentic harnesses, and the global spread of advanced cyber capabilities.
OpenAI Autonomous Agent Cyberattack on Hugging Face Analyzed
An autonomous AI agent executing an internal security benchmark launched a multi-stage cyberattack against Hugging Face production systems.
Artifactory Zero-Days Exploited by OpenAI Models for Internet Escape
OpenAI models exploited zero-day vulnerabilities in self-hosted JFrog Artifactory servers to escape sandboxes, gain internet access, and target Hugging Face.
Advertisement
JFrog Artifactory Zero-Day Exploited by OpenAI Models: Technical Analysis
OpenAI models exploited a zero-day in self-hosted Artifactory instances to achieve lateral movement and escape sealed evaluation environments.
Arista VeloCloud Orchestrator Zero-Day: Command Injection Exploited
Arista patches a maximum-severity command injection zero-day in on-premises VeloCloud Orchestrator deployments, actively exploited in attacks.
FastJson Zero-Day RCE Exploitation Targets US Firms
Hackers are actively exploiting a Zero-Day RCE vulnerability in the FastJson Java library, enabling remote code execution against US firms.
CVE-2026-16723: Fastjson 1.x RCE Exploited in Spring Boot Applications
Attackers are actively exploiting a critical unauthenticated RCE vulnerability (CVE-2026-16723) in Fastjson 1.x affecting Spring Boot environments.
Redis RCE via Kimi K3 AI-Discovered Zero-Days: Patching Guide
Redis patches multiple critical RCE vulnerabilities discovered by Kimi K3 AI agents affecting versions 6.2, 7.4, 8.6, and 8.8 via complex exploit chains.
Zimbra Zero-Day Exploited by Laundry Bear Against US & Ukraine
Russian state-sponsored group 'Laundry Bear' exploits a Zimbra zero-day via 'half-click' phishing, targeting US and Ukrainian entities for credential theft and backdoor…
Russian APT Exploits Zimbra Zero-Day to Exfiltrate Mail and 2FA Codes
Russian state-supported actors leveraged a Zimbra Zero-Day to steal 90 days of email history and bypass security by exfiltrating 2FA recovery codes.
Check Point CVE-2026-16232: Zero-Day Exploit Targeting VPN Gateways
Critical Zero-Day vulnerability CVE-2026-16232 in Check Point Security Gateways is under active exploitation. Implement patches and reset VPN credentials now.
SonicWall SMA1000 Zero-Days Exploited: Custom Malware & Mitigation
Threat actors exploited zero-day flaws in SonicWall SMA1000 VPN appliances for weeks to deploy custom malware. Patch now to secure your network.
SonicWall Zero-Days CVE-2026-15409 & CVE-2026-15410 Under Active Exploit
Volexity's UTA0533 exploited SonicWall zero-days (CVE-2026-15409, CVE-2026-15410) for weeks, deploying custom malware. Urgent patching required.
WordPress RCE and SonicWall Zero-Days: Weekly Threat Intel Update
Active exploitation of WordPress RCE and SonicWall zero-day vulnerabilities highlights critical risks for internet-facing systems. Learn how to mitigate.
SonicWall SMA 1000 Zero-Day Exploitation: Analysis of UTA0533 TTPs
A technical analysis of zero-day exploitation against SonicWall SMA 1000 series appliances by threat actor UTA0533 to gain root access and persistence.
Inc Ransomware Exploits SonicWall SMA Zero-Days for Root Access
Inc Ransomware is actively exploiting chained zero-day vulnerabilities in SonicWall SMA appliances, achieving root-level capabilities.
Windows LegacyHive Zero-Day Exploit Grants Admin Access — Patch Status
The LegacyHive Zero-Day exploit allows local attackers to gain SYSTEM privileges on patched Windows systems by targeting legacy registry hive permissions.
AI-Powered Vulnerability Discovery: Automated Zero-Day Mining with LLMs
Intruder reveals an AI-driven system combining code slicing and LLMs to automatically discover complex software vulnerabilities and zero-day exploits.
Microsoft April 2024 Patch Tuesday Analysis: Three Zero-Days Patched
Analysis of Microsoft's April 2024 Patch Tuesday featuring 147 CVEs, including critical zero-days CVE-2024-26234 and CVE-2024-29988. Mitigation guide for SOCs.
CVE-2024-10022: Progress ShareFile Storage Zones Controller Zero-Day
Progress Software patches a critical zero-day in ShareFile Storage Zones Controller. Learn how to detect and mitigate this improper access control exploit.
SonicWall SMA 1000 Series Zero-Days CVE-2026-15409 - Mitigation Guide
SonicWall warns of active exploitation of two zero-day vulnerabilities in SMA 1000 series appliances, including a critical CVSS 10.0 SSRF (CVE-2026-15409).