Tag: zero-day
-
Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication
Tags: access, authentication, credentials, cyber, exploit, hacker, ivanti, network, threat, vpn, vulnerability, zero-dayAttackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then searched the affected network for credentials and sensitive Active Directory data. Volexity attributed the activity to an unknown threat actor it tracks as UTA0576, which repeatedly exploited an appliance running version 22.8R2.4, Build 19097 the…
-
Zero-Days Lurk in Microsoft’s Overgrown October Patch Tuesday
The scary surprises for the largest security update ever include security bypasses and unauthenticated RCEs. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/zero-days-microsoft-october-patch-tuesday
-
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for an out-of-band release. First seen on cyberscoop.com Jump to article: cyberscoop.com/ivanti-connect-secure-zero-day-actively-exploited/
-
Ivanti VPN Zero-Day Exploited in Active Attacks
Threat Actor UTA0576 Chains 3 Flaws to Execute Commands as Root. Attackers are exploiting CVE-2026-104935 in Ivanti Connect Secure to bypass authentication and gain root access through a three-flaw exploit chain, targeting Active Directory credentials, BitLocker recovery keys and other secrets as researchers warn of wider enterprise compromise. First seen on govinfosecurity.com Jump to article:…
-
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Today is Microsoft’s October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-october-2026-patch-tuesday-fixes-1-411-flaws-3-zero-days/
-
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.” A fix for the third is still pending, according…
-
Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/
-
Hackers Exploit Citrix NetScaler Zero-Days to Deploy Modified Platypus Backdoor
Tags: backdoor, citrix, cyber, defense, exploit, framework, hacker, incident response, open-source, threat, vulnerability, zero-dayThreat actors are exploiting two critical zero-day vulnerabilities in Citrix NetScaler to deploy a modified version of the open-source Platypus remote administration framework on compromised Application Delivery Controller (ADC) and Gateway appliances. Binary Defense’s Analysis on Demand and Incident Response team investigated an intrusion involving two Citrix NetScaler devices. One appliance showed evidence of exploitation…
-
Hackers Exploit Citrix NetScaler Zero-Days to Deploy Modified Platypus Backdoor
Tags: backdoor, citrix, cyber, defense, exploit, framework, hacker, incident response, open-source, threat, vulnerability, zero-dayThreat actors are exploiting two critical zero-day vulnerabilities in Citrix NetScaler to deploy a modified version of the open-source Platypus remote administration framework on compromised Application Delivery Controller (ADC) and Gateway appliances. Binary Defense’s Analysis on Demand and Incident Response team investigated an intrusion involving two Citrix NetScaler devices. One appliance showed evidence of exploitation…
-
Über Zero-Day-Lücke: Offenbar erster KI-Angriff auf deutsche Kommune
Das Ziel ist Tangerhütte in Sachsen-Anhalt. Unter anderem deutet die Geschwindigkeit der Angreifer auf den Einsatz von KI hin. First seen on golem.de Jump to article: www.golem.de/news/ueber-zero-day-luecke-offenbar-erster-ki-angriff-auf-deutsche-kommune-2610-214050.html
-
Über Zero-Day-Lücke: Offenbar erster KI-Angriff auf deutsche Kommune
Das Ziel ist Tangerhütte in Sachsen-Anhalt. Unter anderem deutet die Geschwindigkeit der Angreifer auf den Einsatz von KI hin. First seen on golem.de Jump to article: www.golem.de/news/ueber-zero-day-luecke-offenbar-erster-ki-angriff-auf-deutsche-kommune-2610-214050.html
-
âš¡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That’s not much time to read the warning, let alone do something about it.But speed is only part of the problem. A secure connection didn’t always mean a safe destination.…
-
Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-earn-1262000-for-98-zero-days-at-pwn2own-ireland/
-
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/samsung-galaxy-s26-hacked-three-more-times-at-pwn2own-ireland/
-
Pwn2Own: Hacker knacken Samsung Galaxy S26 und Philips Hue Bridge
Neue Zero-Day-Lücken gibt es auch in KI-Diensten und Druckern. Insgesamt zeigen Forscher am ersten Tag des Wettbewerbs 32 Bugs. First seen on golem.de Jump to article: www.golem.de/news/pwn2own-hacker-knacken-samsung-galaxy-s26-und-philips-hue-bridge-2610-213819.html
-
Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One
Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/pwn2own-hackers-32-zeroday/
-
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-32-zero-days-on-first-day-of-pwn2own-ireland/
-
Weekly Cybersecurity Newsletter Top 50 Biggest Cybersecurity Stories of the Week
Citrix NetScaler Zero-Days Exploited, OpenAI Agent Swarm Hits Hugging Face, Pentagon Breach Hits 3M, ShinyHunters Leader Arrested, Anthropic MCP Flaw & More Welcome to this week’s edition of the GBHackers cybersecurity newsletter your weekly cybersecurity bulletin covering the 50 most important stories from September 28 to October 2, 2026. AI dominated the week: an OpenAI…
-
ADC und Gateway betroffen – Angreifer nutzen zwei RCE-Zero-Days in Citrix NetScaler aus
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-netscaler-zero-day-rce-schwachstellen-a-0d0ecda04d5fecaaa644a9a911611486/
-
ADC und Gateway betroffen – Angreifer nutzen zwei RCE-Zero-Days in Citrix NetScaler aus
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-netscaler-zero-day-rce-schwachstellen-a-0d0ecda04d5fecaaa644a9a911611486/
-
ADC und Gateway betroffen – Angreifer nutzen zwei RCE-Zero-Days in Citrix NetScaler aus
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-netscaler-zero-day-rce-schwachstellen-a-0d0ecda04d5fecaaa644a9a911611486/
-
ADC und Gateway betroffen – Angreifer nutzen zwei RCE-Zero-Days in Citrix NetScaler aus
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-netscaler-zero-day-rce-schwachstellen-a-0d0ecda04d5fecaaa644a9a911611486/
-
Citrix discloses third actively exploited NetScaler zero-day in less than a week
The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively low compared to the previous pair of zero-days. First seen on cyberscoop.com Jump to article: cyberscoop.com/citrix-netscaler-third-exploited-zero-day-vulnerability/
-
Citrix discloses third actively exploited NetScaler zero-day in less than a week
The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively low compared to the previous pair of zero-days. First seen on cyberscoop.com Jump to article: cyberscoop.com/citrix-netscaler-third-exploited-zero-day-vulnerability/
-
Citrix Patches Yet Another Under-Fire Zero-Day in NetScaler
Denial of Service May Be Targeted to Help Exploit Other Recently Patched Flaws. Just one week after patching two zero-day vulnerabilities being actively exploited in its NetScaler appliances, Citrix has issued another emergency patch for a denial-of-service vulnerability also being actively exploited, potentially to more rapidly take down unpatched appliances. First seen on govinfosecurity.com Jump…
-
Citrix Patches Yet Another Under-Fire Zero-Day in NetScaler
Denial of Service May Be Targeted to Help Exploit Other Recently Patched Flaws. Just one week after patching two zero-day vulnerabilities being actively exploited in its NetScaler appliances, Citrix has issued another emergency patch for a denial-of-service vulnerability also being actively exploited, potentially to more rapidly take down unpatched appliances. First seen on govinfosecurity.com Jump…
-
âš¡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were easy to overlook.There are actively exploited bugs in the mix, cleaner intrusion paths, smarter automation, and a long patch…
-
Citrix NetScaler Targeted Via New Zero Day
The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/citrix-netscaler-zero-day/
-
Autonomous AI Agent Chains Two Zammad Zero-Days in Machine-Speed Cyberattack
An autonomous AI agent breached the Dutch Institute for Vulnerability Disclosure (DIVD) after chaining two previously undisclosed vulnerabilities in the Zammad helpdesk platform, turning an initial application compromise into root access within seconds. The incident, first detected on September 22 after the attacker accessed DIVD systems a day earlier, offers a stark example of how…
-
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks.The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0.”CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway that can…