Security news aggregator

Latest coverage for 0-Day

A 0-Day is a software vulnerability without an available fix, creating risk because defenders have limited time to mitigate exploitation.

12 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

0-Day describes a software vulnerability unknown to the software maker or unpatched when first exploited. Attackers can use these flaws immediately, as no official fix or signature exists to block the exploit. Such vulnerabilities often affect widely deployed software or hardware, making them valuable for targeted attacks or widespread campaigns.

Because defenders lack patches or reliable detection signatures initially, they must rely on anomaly detection, network monitoring, and threat intelligence to identify suspicious activity linked to 0-day exploits. Rapid patching once a fix is released is critical to reduce exposure. Tracking emerging 0-day threats helps prioritize defensive measures and informs risk management decisions in environments where unpatched vulnerabilities pose significant security risks.

Volume over time

Weekly headline count for the current query.

Showing 12 most recent headlines Filtered view

LegacyHive PoC exposes a Windows Privilege Escalation flaw affecting fully patched Windows desktop and server systems. Just hours after Microsoft’s July 2026 Patch Tuesday, security researcher Nightmare Eclipse, also known as Chaotic Eclipse, published a new Windows zero-day proof-of-concept called LegacyHive. This time, the target is the Windows User Profile Service (ProfSvc), and unlike the […]

Security Affairs 16 Jul 2026, 4:57 a.m. Theme · 4 stories 0-Day Exploit Flaw Microsoft Patch Patch Tuesday PoC Privilege Escalation

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities (KEV) catalog. The flaws added to the catalog are: This week, SonicWall confirmed the active exploitation of two zero-day vulnerabilities […]

Security Affairs 15 Jul 2026, 10:49 p.m. Theme · 6 stories 0-Day America CISA Flaw Microsoft Vulnerability

SonicWall warns of active attacks exploiting two SMA 1000 zero-days, including a flaw enabling arbitrary command execution. SonicWall confirmed the active exploitation of two zero-day vulnerabilities affecting Secure Mobile Access (SMA) 1000 appliances. The vulnerabilities were internally discovered and reported by Adam Babis of the company’s PSIRT. The company investigated multiple incidents indicating these vulnerabilities […]

Security Affairs 15 Jul 2026, 8:02 p.m. Incident · 4 stories 0-Day Flaw Mobile Vulnerability Warning

Microsoft confirmed the RoguePlanet Defender zero-day (CVE-2026-50656), a privilege escalation flaw, and is developing a security patch. Microsoft has acknowledged the RoguePlanet zero-day affecting Microsoft Defender, tracked as CVE-2026-50656 (CVSS score of 7.8). The vulnerability allows privilege escalation through the Microsoft Malware Protection Engine. The company stated it is aware of the issue and is […]

Security Affairs 18 Jun 2026, 9:21 p.m. Theme · 12 stories CVE-2026-50656 0-Day Antivirus CVE Flaw Malware Microsoft Patch Privilege Escalation Vulnerability

ShinyHunters exploited a critical Oracle PeopleSoft zero-day to breach over 100 organizations, mostly universities, before a patch was available. Mandiant and Google’s Threat Intelligence Group published an analysis of an active ShinyHunters campaign on June 11, one day after Oracle finally issued an advisory for the vulnerability being exploited. The gap matters: the activity ran […]

Security Affairs 12 Jun 2026, 10:49 p.m. Incident · 9 stories 0-Day Breach Flaw Google Oracle Patch Remote Code Execution Vulnerability

GreatXML bypasses BitLocker via Defender offline scan artifacts, giving SYSTEM shell in Recovery Mode. No patch exists. Any machine that ran an offline scan is vulnerable. On June 10, security researcher Chaotic Eclipse (aka Nightmare Eclipse) published a new working exploit dubbed GreatXML that bypasses BitLocker and opens a command shell with full SYSTEM privileges […]

Security Affairs 11 Jun 2026, 10:58 p.m. Incident · 3 stories 0-Day Exploit Outage Patch Research Vulnerability

The researcher Chaotic Eclipse released a PoC for the RoguePlanet Microsoft Defender zero-day, which can grant SYSTEM privileges on fully patched Windows systems. Security researcher Chaotic Eclipse, also known as Nightmare-Eclipse, has published a new proof-of-concept exploit for a RoguePlanet Microsoft Defender zero-day. The flaw relies on a race condition that can provide attackers with […]

Security Affairs 10 Jun 2026, 9:45 p.m. Theme · 12 stories 0-Day Antivirus Exploit Flaw Microsoft Patch PoC

Microsoft Patch Tuesday security updates for June 2026 fix a record 208 CVEs, including one actively exploited zero-day and multiple critical RCE flaws. Microsoft Patch Tuesday security updates for June 2026 mark a record. Microsoft shipped fixes for 208 CVEs across Windows, Office, Azure, Exchange, Hyper-V, Secure Boot, BitLocker, and a range of AI tooling. […]

Security Affairs 10 Jun 2026, 10:55 a.m. Theme · 2 stories 0-Day Artificial Intelligence Azure Flaw Microsoft Patch Patch Tuesday Remote Code Execution

Google fixed a new Chrome zero-day, tracked as CVE-2026-11645, in the V8 JavaScript engine, which is already being exploited in the wild. Google released emergency updates to address a new Chrome zero-day vulnerability, tracked as CVE-2026-11645, that has been exploited in the wild. This flaw is the fifth Chrome zero-day that is being exploited in […]

Security Affairs 9 Jun 2026, 10:38 p.m. Incident · 4 stories Actively exploited CVE-2026-11645 0-Day Chrome CVE Fixed Flaw Google JavaScript Vulnerability

A researcher publicly released a VS Code exploit within hours, citing past disputes with Microsoft over bug handling. The security researcher Ammar Askar found a new serious zero-day in Visual Studio Code, told a contact at GitHub about it, and published a working exploit one hour later. “Just by clicking a link, it’s possible for […]

Security Affairs 4 Jun 2026, 9:13 p.m. Incident · 3 stories 0-Day Disclosure Exploit Github Microsoft

A researcher dropped 6 Windows zero-days with no warning. Three are now exploited in the wild. Microsoft is angry. The researcher says Microsoft ignored them first. Over the past month, a researcher going by Chaotic Eclipse, also known as Nightmare-Eclipse, publicly released details of six unpatched vulnerabilities in Windows components including Defender and BitLocker. No […]

Security Affairs 29 May 2026, 10:51 p.m. 0-Day Microsoft Vulnerability Warning

Threat actors are exploiting a critical FortiClient EMS flaw, tracked as CVE-2026-35616, to deploy malware on unpatched systems. Threat actors are exploiting a critical FortiClient EMS vulnerability, tracked as CVE-2026-35616 (CVSS score of 9.1), that allows remote code execution without authentication. Fortinet released fixes in April after confirming zero-day attacks in the wild and urged […]

Security Affairs 29 May 2026, 4:05 a.m. Incident · 3 stories Actively exploited CVE-2026-35616 0-Day Authentication CVE Flaw Fortinet Malware Patch Remote Code Execution Theft Threat Actor Vulnerability