#Zero Day

Patch afd.sys First, Argue About the Other 397 Later

Lazarus burned another zero-day in Windows' socket driver to load its FudModule rootkit — again.

Article · 2d ago0

Framework's Metabase Breach Wasn't a Patching Failure

A CVSS 10.0 zero-day hit Metabase Cloud, and every column piped into analytics became breach-notification surface.

Article · 6d ago1

Attackers Found Cisco's Hardcoded FMC Password Before You Did

CVE-2026-20316 shows why CVSS-based triage fails when the firewall management plane is the target.

Article · 2w ago2

Patch the SharePoint and AD FS zero-days first

July’s record Patch Tuesday is huge, but only two CVEs are already live in attacks—and one product just lost support.

Article · 4w ago1

Cursor's Unpatched Git.exe RCE Still Hits Windows Devs

Six months after report, opening a poisoned Windows repo still runs attacker code with no prompt.

Article · 4w ago1

A 19-Year-Old Linux Kernel Zero-Day Discovered via kernelCTF

A type confusion bug in the network bonding driver exposes the persistence of silent, long-lived kernel vulnerabilities.

Article · 1mo ago0

AI Agents Uncover 21 Zero-Day Vulnerabilities in FFmpeg

Autonomous security agents found decades-old memory safety flaws in the widely deployed media processing library, prompting urgent updates.

News · 2mos ago2