#zero-day-vulnerabilities
#zero-day-vulnerabilities
[ follow ]
fromThe Hacker News
1 week agoChina-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines
Chinese-speaking threat actors are suspected to have leveraged a compromised SonicWall VPN appliance as an initial access vector to deploy a VMware ESXi exploit that may have been developed as far back as February 2024. Cybersecurity firm Huntress, which observed the activity in December 2025 and stopped it before it could progress to the final stage, said it may have resulted in a ransomware attack.
Information security
Information security
fromDataBreaches.Net
3 months agoCISA Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices - DataBreaches.Net
Critical Cisco ASA zero-day vulnerabilities enable unauthenticated remote code execution and ROM persistence; agencies must immediately mitigate, assess compromise, and remediate ASA and Firepower devices.
fromZDNET
5 months agoMicrosoft fixes two SharePoint zero-days under attack, but it's not over - how to patch
CVE-2025-53771 is a SharePoint Server spoofing vulnerability allowing attackers to impersonate trusted users or resources, while CVE-2025-53770 permits remote code execution.
Privacy professionals
#apple
Apple
fromTechRepublic
9 months agoApple Patches Two Zero-Days Used in 'Extremely Sophisticated' Attacks
Apple addressed critical security vulnerabilities to protect devices from targeted attacks.
The vulnerabilities exploited sophisticated attacks against specific individuals, indicating possible government involvement.
[ Load more ]