#zero-day-vulnerabilities
#zero-day-vulnerabilities
[ follow ]
#cybersecurity
Information security
fromTechzine Global
2 weeks agoGoogle: AI likely aided attackers to develop a zero-day
Generative AI is increasingly used to develop exploits, enabling attackers to bypass two-factor authentication and automate offensive workflows.
Information security
fromFuturism
2 weeks agoGoogle Alarmed by Formidable AI-Powered Zero-Day Cyberattack
A cyberattack used AI to discover and weaponize an unknown zero-day flaw, potentially bypassing two-factor authentication on a web administration tool, but was thwarted.
Information security
fromthenextweb.com
3 weeks agoAnthropic Mythos AI finds thousands of zero-day vulnerabilities as Fed and Treasury convene bank CEOs on cyber rik
Claude Mythos Preview identified thousands of zero-day vulnerabilities, prompting urgent bank discussions and warning of a six-to-twelve month patch window before adversaries replicate capability.
Information security
fromthenextweb.com
3 weeks agoAnthropic Mythos AI finds thousands of zero-day vulnerabilities as Fed and Treasury convene bank CEOs on cyber rik
Claude Mythos Preview identified thousands of zero-day vulnerabilities, prompting urgent bank discussions and warning of a six-to-twelve month patch window before adversaries replicate capability.
Information security
fromTNW | Data-Security
2 weeks agoGoogle identifies first AI-developed zero-day exploit and thwarts planned mass exploitation event
Google identified an AI-assisted zero-day exploit, disrupted a planned mass exploitation event, and documented state-sponsored AI use in vulnerability research and malware development.
#ai-cybersecurity
London startup
fromTNW | Security
3 weeks agoIntruder launches AI pentesting agents as GCHQ-backed startup automates $50K manual security tests
AI pentesting agents replicate human methodology to validate scanner findings and deliver vulnerability results in minutes at far lower cost than manual testing.
London startup
fromTNW | Security
3 weeks agoIntruder launches AI pentesting agents as GCHQ-backed startup automates $50K manual security tests
AI pentesting agents replicate human methodology to validate scanner findings and deliver vulnerability results in minutes at far lower cost than manual testing.
Artificial intelligence
fromwww.theguardian.com
1 month agoThe Guardian view on Anthropic's Claude Mythos: when AI finds every flaw, who controls the internet? | Editorial
Claude Mythos can autonomously exploit zero-day flaws, turning computers into crime scenes and significantly increasing the risk of cyber-attacks.
Artificial intelligence
fromFortune
1 month agoAI cybersecurity capabilities require urgent international cooperation, AI godfather Bengio says | Fortune
Yoshua Bengio emphasizes the urgent need for international cooperation in addressing AI's risks, particularly with the release of Anthropic's Mythos model.
Information security
fromSecurityWeek
2 months ago'DarkSword' iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors
Security researchers discovered DarkSword, a sophisticated iOS exploit kit used by Russian state-sponsored hackers and commercial spyware vendors to compromise Apple devices with minimal user interaction.
fromTheregister
2 months agoGoogle rushes Chrome update to fix zero-days under attack
CVE-2026-3909 is an out-of-bounds write flaw in Skia, the graphics library Chrome uses to render web content and parts of its user interface. Memory corruption bugs like this can sometimes be abused by attackers to crash applications or run their own code if successfully exploited.
Information security
fromSecurityWeek
2 months agoChrome 146 Update Patches Two Exploited Zero-Days
Google is aware that exploits for both CVE-2026-3909 & CVE-2026-3910 exist in the wild. CVE-2026-3909 is described as an out-of-bounds write defect in the Skia graphics library. It could be triggered via malicious HTML pages to corrupt memory, which could lead to arbitrary code execution or crashes.
Information security
Games
fromZero Day Initiative
2 months agoZero Day Initiative - Announcing Pwn2Own Berlin for 2026
Pwn2Own returns to Berlin in 2026 with expanded AI categories, AWS co-sponsorship, over $1,000,000 in prizes, and 31 targets across 10 categories including browsers, containers, servers, virtualization, and operating systems.
fromThe Hacker News
2 months agoMicrosoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days
This month, over half (55%) of all Patch Tuesday CVEs were privilege escalation bugs, and of those, six were rated exploitation more likely across Windows Graphics Component, Windows Accessibility Infrastructure, Windows Kernel, Windows SMB Server, and Winlogon. We know these bugs are typically used by threat actors as part of post-compromise activity, once they get onto systems through other means (social engineering, exploitation of another vulnerability).
Information security
fromArs Technica
2 months agoFeds take notice of iOS vulnerabilities exploited under mysterious circumstances
How this proliferation occurred is unclear, but suggests an active market for 'second hand' zero-day exploits. Beyond these identified exploits, multiple threat actors have now acquired advanced exploitation techniques that can be re-used and modified with newly identified vulnerabilities.
Information security
Information security
fromTechzine Global
2 months agoChina and spyware companies dominate zero-day attacks
Zero-day vulnerability exploits reached 90 cases in 2025, with Chinese cyber espionage groups and commercial spyware companies driving attacks increasingly toward enterprise infrastructure and security equipment.
#enterprise-security
Information security
fromTechCrunch
2 months agoGoogle says half of all zero-days it tracked in 2025 targeted buggy enterprise tech | TechCrunch
Nearly half of tracked zero-day vulnerabilities in 2024 targeted enterprise devices, with security infrastructure like firewalls and VPNs being primary targets for hackers seeking corporate data access.
Information security
fromTechCrunch
2 months agoGoogle says half of all zero-days it tracked in 2025 targeted buggy enterprise tech | TechCrunch
Nearly half of tracked zero-day vulnerabilities in 2024 targeted enterprise devices, with security infrastructure like firewalls and VPNs being primary targets for hackers seeking corporate data access.
fromComputerWeekly.com
2 months agoSpyware suppliers exploit more zero-days than nation states | Computer Weekly
Historically, traditional state-sponsored cyber espionage groups have been the most prolific attributed users of zero-day vulnerabilities. [But] over the last few years, the increase of zero-day exploitation attributed to CSVs and their customers has demonstrated the growing ability of these vendors to provide zero-day access to a wider range of threat actors than ever before.
Information security
Information security
fromThe Hacker News
2 months agoWeekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More
Multiple attack vectors across network systems, cloud infrastructure, and AI platforms exploit access control gaps, exposed credentials, and trusted service misuse to target high-value sectors.
Information security
fromSecurityWeek
3 months agoUS Sanctions Russian Exploit Broker Operation Zero
The US government sanctioned seven individuals and entities for acquiring and distributing cyber exploits, including a Russian broker who paid $1.3 million for stolen zero-day exploits intended for government use.
fromTheregister
4 months agoAutomotive systems get pwned at Pwn2Own Automotive 2026
infosec in brief T'was a dark few days for automotive software systems last week, as the third annual Pwn2Own Automotive competition uncovered 76 unique zero-day vulnerabilities in targets ranging from Tesla infotainment to EV chargers. A record 73 entries were included in this year's competition at Automotive World in Tokyo, and, while not all were successful, Trend Micro's Zero Day Initiative still ended up paying out more than $1 million to successful competitors. For those unfamiliar with the structure of a Pwn2Own competition, ethical hackers and security experts enter with plans to perform a certain exploit, which they must do in a limited time.
fromThe Hacker News
4 months agoChina-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines
Chinese-speaking threat actors are suspected to have leveraged a compromised SonicWall VPN appliance as an initial access vector to deploy a VMware ESXi exploit that may have been developed as far back as February 2024. Cybersecurity firm Huntress, which observed the activity in December 2025 and stopped it before it could progress to the final stage, said it may have resulted in a ransomware attack.
Information security
Information security
fromDataBreaches.Net
8 months agoCISA Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices - DataBreaches.Net
Critical Cisco ASA zero-day vulnerabilities enable unauthenticated remote code execution and ROM persistence; agencies must immediately mitigate, assess compromise, and remediate ASA and Firepower devices.
fromZDNET
10 months agoMicrosoft fixes two SharePoint zero-days under attack, but it's not over - how to patch
CVE-2025-53771 is a SharePoint Server spoofing vulnerability allowing attackers to impersonate trusted users or resources, while CVE-2025-53770 permits remote code execution.
Privacy professionals
[ Load more ]