Latest cybersecurity reporting from selected sources.

Microsoft has patched two zero-day flaws and over 160 others

Fortinet has updated its FortiClient EMS product after zero-day attacks surfaced

Six actively exploited zero-day bug have been patched by Microsoft

Microsoft has patched three zero-day vulnerabilities in the first patch Tuesday of 2026, including one under active exploitation

Google said it found indications that two newly identified vulnerabilities affecting Android “may be under limited, targeted exploitation”

Microsoft has patched a zero-day vulnerability in the Windows Kernel under active exploitation by threat actors

CISA has demanded federal agencies patch a zero-day vulnerability affecting Samsung devices used in LandFall spyware attacks

Microsoft has fixed over 170 CVEs in October’s Patch Tuesday, including six zero-day vulnerabilities

WhatsApp has fixed a zero-day vulnerability linked to a sophisticated cyber-attack

All Apple users are encouraged to update their iPhones, iPads and macOS devices

Microsoft announced updates for 107 vulnerabilities on Patch Tuesday, including one zero-day

CVE-2025-47981 has the “unfortunate hallmarks of becoming a significant problem,” said WatchTowr’s CEO

Google has patched a critical type confusion vulnerability in Chrome, the fourth zero-day fix in 2025

Microsoft has patched seven zero-day bugs, five of which were exploited in the wild

Microsoft has issued security updates to fix 130+ vulnerabilities this month, including one zero-day

Cloud software firm VMware has issued a critical security advisory, detailing three zero-day vulnerabilities being actively exploited in the wild

Apple has patched a zero-day vulnerability being exploited in targeted attacks

Ivanti customers are urged to patch two new bugs in the security vendor's products, one of which is being actively exploited

Microsoft has patched dozens of vulnerabilities in December, including one zero-day being exploited in the wild

Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited