#zeroday — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #zeroday, aggregated by home.social.
-
Reward: You've received a Cautionary Fossil — display it proudly beside your unreviewed vendor access list.
#DataBreach #CyberSecurity #InfoSec #ZeroDay #IdentityTheft #AchievementUnlocked (3/3)
-
Reward: You've received a Cautionary Fossil — display it proudly beside your unreviewed vendor access list.
#DataBreach #CyberSecurity #InfoSec #ZeroDay #IdentityTheft #AchievementUnlocked (3/3)
-
Reward: You've received a Cautionary Fossil — display it proudly beside your unreviewed vendor access list.
#DataBreach #CyberSecurity #InfoSec #ZeroDay #IdentityTheft #AchievementUnlocked (3/3)
-
A GeoServer unauthenticated SQL injection (CVSS 9.8) is exploited in the wild. A public PoC reaches remote code execution.
#GeoServer #SQLInjection #ZeroDay #ExploitedInTheWild #RCE #GeoTools
-
A GeoServer unauthenticated SQL injection (CVSS 9.8) is exploited in the wild. A public PoC reaches remote code execution.
#GeoServer #SQLInjection #ZeroDay #ExploitedInTheWild #RCE #GeoTools
-
Your healers cannot save you. Restrict access to GeoServer admin interfaces NOW and watch those patch feeds like your raid lead is screaming in your ear — because they should be.
Reward: You've received the Unplanned Downtime Debuff. It stacks.
#ZeroDay #GeoServer #RCE #CyberSecurity #Vulnerability #AchievementUnlocked (2/2)
-
Your healers cannot save you. Restrict access to GeoServer admin interfaces NOW and watch those patch feeds like your raid lead is screaming in your ear — because they should be.
Reward: You've received the Unplanned Downtime Debuff. It stacks.
#ZeroDay #GeoServer #RCE #CyberSecurity #Vulnerability #AchievementUnlocked (2/2)
-
Your healers cannot save you. Restrict access to GeoServer admin interfaces NOW and watch those patch feeds like your raid lead is screaming in your ear — because they should be.
Reward: You've received the Unplanned Downtime Debuff. It stacks.
#ZeroDay #GeoServer #RCE #CyberSecurity #Vulnerability #AchievementUnlocked (2/2)
-
🤖 Zhipu says new coding AI developed advanced cyber skills faster than expected
📝 Chinese AI developer Zhipu has launched GLM-5. 3, ...
📰 CSO Online
-
🤖 Zhipu says new coding AI developed advanced cyber skills faster than expected
📝 Chinese AI developer Zhipu has launched GLM-5. 3, ...
📰 CSO Online
-
🤖 An AI broke Snowflake's code. Then another AI agent exploited it
📝 An AI broke Snowflake’s code; then another AI, an a...
📰 www.theregister.com - Articles
-
🤖 An AI broke Snowflake's code. Then another AI agent exploited it
📝 An AI broke Snowflake’s code; then another AI, an a...
📰 www.theregister.com - Articles
-
🏛️ CISA Adds One Known Exploited Vulnerability to Catalog
📝 CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog ,...
📰 Alerts
-
🏛️ CISA Adds One Known Exploited Vulnerability to Catalog
📝 CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog ,...
📰 Alerts
-
📰 New 'ShieldBreak' Exploit Bypasses Microsoft Defender Patch
A new zero-day exploit, 'ShieldBreak,' bypasses Microsoft's patch for the 'RoguePlanet' Defender flaw (CVE-2026-50656). The PoC allows SYSTEM-level access on patched Windows systems. No fix is currently available. #ZeroDay #MicrosoftDefender #CyberSe...
-
That is a passing grade for them and a failing grade for you.
This concludes the practical exam portion of your training. Results have been distributed to your files, your encrypted files, and 46 other countries' encrypted files. Please apply the latest VMware vCenter patch and audit your access logs for unauthorized root activity immediately.
Reward: You've received a Mandatory Remediation Training Badge. It is not a good badge.
-
That is a passing grade for them and a failing grade for you.
This concludes the practical exam portion of your training. Results have been distributed to your files, your encrypted files, and 46 other countries' encrypted files. Please apply the latest VMware vCenter patch and audit your access logs for unauthorized root activity immediately.
Reward: You've received a Mandatory Remediation Training Badge. It is not a good badge.
-
That is a passing grade for them and a failing grade for you.
This concludes the practical exam portion of your training. Results have been distributed to your files, your encrypted files, and 46 other countries' encrypted files. Please apply the latest VMware vCenter patch and audit your access logs for unauthorized root activity immediately.
Reward: You've received a Mandatory Remediation Training Badge. It is not a good badge.
-
Apple Alerts 110 Countries to Mercenary Spyware Threats
Apple just sounded the alarm for users in 110 countries, warning them they've been targeted by highly sophisticated mercenary spyware attacks that are among the most advanced digital threats out there. This latest alert is part of a multi-year effort to protect users, with notifications now sent to customers in over 150 countries.
#MercenarySpyware #EmergingThreats #Apple #ZeroDay #NationState
-
Apple Alerts 110 Countries to Mercenary Spyware Threats
Apple just sounded the alarm for users in 110 countries, warning them they've been targeted by highly sophisticated mercenary spyware attacks that are among the most advanced digital threats out there. This latest alert is part of a multi-year effort to protect users, with notifications now sent to customers in over 150 countries.
#MercenarySpyware #EmergingThreats #Apple #ZeroDay #NationState
-
Apple Alerts 110 Countries to Mercenary Spyware Threats
Apple just sounded the alarm for users in 110 countries, warning them they've been targeted by highly sophisticated mercenary spyware attacks that are among the most advanced digital threats out there. This latest alert is part of a multi-year effort to protect users, with notifications now sent to customers in over 150 countries.
#MercenarySpyware #EmergingThreats #Apple #ZeroDay #NationState
-
Apple Alerts 110 Countries to Mercenary Spyware Threats
Apple just sounded the alarm for users in 110 countries, warning them they've been targeted by highly sophisticated mercenary spyware attacks that are among the most advanced digital threats out there. This latest alert is part of a multi-year effort to protect users, with notifications now sent to customers in over 150 countries.
#MercenarySpyware #EmergingThreats #Apple #ZeroDay #NationState
-
Microsoft is "racing to patch," which is a fun phrase that means the patch is not ready.
Patch Microsoft Defender and the Malware Protection Engine the moment that update drops — do not wait.
Reward: You've unlocked the Cursed Irony Badge. It does not stack with Defender.
#ZeroDay #Microsoft #Ransomware #CyberSecurity #InfoSec #PatchedOrPerish (2/2)
-
Microsoft is "racing to patch," which is a fun phrase that means the patch is not ready.
Patch Microsoft Defender and the Malware Protection Engine the moment that update drops — do not wait.
Reward: You've unlocked the Cursed Irony Badge. It does not stack with Defender.
#ZeroDay #Microsoft #Ransomware #CyberSecurity #InfoSec #PatchedOrPerish (2/2)
-
Microsoft is "racing to patch," which is a fun phrase that means the patch is not ready.
Patch Microsoft Defender and the Malware Protection Engine the moment that update drops — do not wait.
Reward: You've unlocked the Cursed Irony Badge. It does not stack with Defender.
#ZeroDay #Microsoft #Ransomware #CyberSecurity #InfoSec #PatchedOrPerish (2/2)
-
You, the defendant, operated an unpatched instance. The prosecution rests.
Remote code execution is the damages sought. The verdict was rendered before you even knew the case was filed. Please patch GeoServer immediately and monitor for exploitation attempts; ignorance is not, as your counsel may have hoped, a defense.
Reward: You've received a subpoena-shaped loot token. It is not redeemable for anything.
#CyberSecurity #ZeroDay #GeoServer #SQLInjection #RCE #PatchedOrPerish (2/2)
-
You, the defendant, operated an unpatched instance. The prosecution rests.
Remote code execution is the damages sought. The verdict was rendered before you even knew the case was filed. Please patch GeoServer immediately and monitor for exploitation attempts; ignorance is not, as your counsel may have hoped, a defense.
Reward: You've received a subpoena-shaped loot token. It is not redeemable for anything.
#CyberSecurity #ZeroDay #GeoServer #SQLInjection #RCE #PatchedOrPerish (2/2)
-
You, the defendant, operated an unpatched instance. The prosecution rests.
Remote code execution is the damages sought. The verdict was rendered before you even knew the case was filed. Please patch GeoServer immediately and monitor for exploitation attempts; ignorance is not, as your counsel may have hoped, a defense.
Reward: You've received a subpoena-shaped loot token. It is not redeemable for anything.
#CyberSecurity #ZeroDay #GeoServer #SQLInjection #RCE #PatchedOrPerish (2/2)
-
Read our weekly threat intelligence report for mid-August 2026. Explore critical active vulnerability updates, Metabase exploits, and CISA KEV additions.
#ThreatIntelligence #CyberSecurity #VulnerabilityReport #CISA #ZeroDay #InfoSec #CyberDefense
-
Read our weekly threat intelligence report for mid-August 2026. Explore critical active vulnerability updates, Metabase exploits, and CISA KEV additions.
#ThreatIntelligence #CyberSecurity #VulnerabilityReport #CISA #ZeroDay #InfoSec #CyberDefense
-
Outcome: yours.
This is fine. Everything is fine. Apply the August 2026 Patch Tuesday update to Windows immediately — especially afd.sys — before that exploited privilege escalation becomes your problem personally.
Reward: You've received 751 To-Do Items and a motivational poster that says "Ship It."
#PatchTuesday #Windows #CyberSecurity #Ransomware #ZeroDay #PatchedOrPerish (2/2)
-
Outcome: yours.
This is fine. Everything is fine. Apply the August 2026 Patch Tuesday update to Windows immediately — especially afd.sys — before that exploited privilege escalation becomes your problem personally.
Reward: You've received 751 To-Do Items and a motivational poster that says "Ship It."
#PatchTuesday #Windows #CyberSecurity #Ransomware #ZeroDay #PatchedOrPerish (2/2)
-
Outcome: yours.
This is fine. Everything is fine. Apply the August 2026 Patch Tuesday update to Windows immediately — especially afd.sys — before that exploited privilege escalation becomes your problem personally.
Reward: You've received 751 To-Do Items and a motivational poster that says "Ship It."
#PatchTuesday #Windows #CyberSecurity #Ransomware #ZeroDay #PatchedOrPerish (2/2)
-
Multiple confirmed kills already reported.
The creature had every tool for survival and chose not to use them. Naturalists are baffled, though not surprised.
To avoid becoming a specimen: disable screen sharing when not in use, and ensure port 5900 is never reachable from the internet.
Reward: You've received a commemorative Dodo Feather — awarded for preventable extinctions.
#MacOS #Vulnerability #ZeroDay #RemoteCodeExecution #CyberSecurity #PatchedOrPerish (2/2)
-
Multiple confirmed kills already reported.
The creature had every tool for survival and chose not to use them. Naturalists are baffled, though not surprised.
To avoid becoming a specimen: disable screen sharing when not in use, and ensure port 5900 is never reachable from the internet.
Reward: You've received a commemorative Dodo Feather — awarded for preventable extinctions.
#MacOS #Vulnerability #ZeroDay #RemoteCodeExecution #CyberSecurity #PatchedOrPerish (2/2)
-
Multiple confirmed kills already reported.
The creature had every tool for survival and chose not to use them. Naturalists are baffled, though not surprised.
To avoid becoming a specimen: disable screen sharing when not in use, and ensure port 5900 is never reachable from the internet.
Reward: You've received a commemorative Dodo Feather — awarded for preventable extinctions.
#MacOS #Vulnerability #ZeroDay #RemoteCodeExecution #CyberSecurity #PatchedOrPerish (2/2)
-
Reward: You've received the Unpatched Enterprise World First (Fail) title. It does not look good in the achievement showcase.
#SAP #CyberSecurity #ZeroDay #CodeInjection #CriticalVulnerability #PatchedOrPerish (3/3)
-
Reward: You've received the Unpatched Enterprise World First (Fail) title. It does not look good in the achievement showcase.
#SAP #CyberSecurity #ZeroDay #CodeInjection #CriticalVulnerability #PatchedOrPerish (3/3)
-
Reward: You've received the Unpatched Enterprise World First (Fail) title. It does not look good in the achievement showcase.
#SAP #CyberSecurity #ZeroDay #CodeInjection #CriticalVulnerability #PatchedOrPerish (3/3)
-
🏛️ Autonomous AI attacks pose 'clear and present danger' to critical infrastructure
📝 In early July, att...
📰 www.theregister.com - Articles
-
watchTowr filed this report; CISA's Known Exploited Vulnerabilities catalog already has prior GeoServer entries, making this less a surprise and more a recurring line item.
Audit action required: locate exposed GeoServer instances, restrict public access, and watch for a vendor patch before the exploitation scales up.
Reward: One (1) Cursed Exposure Token. Cannot be discarded. Weight: infinite.
#ZeroDay #GeoServer #RCE #SQLInjection #CyberSecurity #PatchedOrPerish (2/2)
-
watchTowr filed this report; CISA's Known Exploited Vulnerabilities catalog already has prior GeoServer entries, making this less a surprise and more a recurring line item.
Audit action required: locate exposed GeoServer instances, restrict public access, and watch for a vendor patch before the exploitation scales up.
Reward: One (1) Cursed Exposure Token. Cannot be discarded. Weight: infinite.
#ZeroDay #GeoServer #RCE #SQLInjection #CyberSecurity #PatchedOrPerish (2/2)
-
watchTowr filed this report; CISA's Known Exploited Vulnerabilities catalog already has prior GeoServer entries, making this less a surprise and more a recurring line item.
Audit action required: locate exposed GeoServer instances, restrict public access, and watch for a vendor patch before the exploitation scales up.
Reward: One (1) Cursed Exposure Token. Cannot be discarded. Weight: infinite.
#ZeroDay #GeoServer #RCE #SQLInjection #CyberSecurity #PatchedOrPerish (2/2)
-
🚨 Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks
📝 Records held in Salesforce and ServiceNow systems are under attack leaving user data...
📰 CSO Online
-
🚨 Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks
📝 Records held in Salesforce and ServiceNow systems are under attack leaving user data...
📰 CSO Online
-
📢 Microsoft face à une nouvelle zero-day en plein bras de fer avec un chercheur
Quelques semaines après avoir menacé de poursuites les chercheurs publiant des zero-day hors de ses procédures, Microsoft fait face à une nouvelle divulgation. ShieldBreak, nouvelle faille zero-day, viserait Windows 10, Windows 11 et Windows Server 2025, sans correctif disponible à ce stade.
🔗 https://www.ictjournal.ch/news/2026-08-14/microsoft-face-a-une-nouvelle-zero-day-en-plein-bras-de-fer-avec-un-chercheur
💬 discussion : https://infosec.pub/post/50912834
#ZeroDay #Cyberveille -
Equip at your own peril.
ITEM STATS: Virtual Environment Integrity — severely debased. Patch status: necessary but possibly insufficient to fully remove the curse.
Patch VMware vCenter immediately and monitor for active exploitation signs regardless.
Reward: You've received the Traversed Directory debuff. -40 to Virtual Infrastructure Confidence. Inventory slot for "Trust in Disclosure Windows" has been permanently destroyed.
#VMware #CyberSecurity #CriticalVulnerability #ZeroDay (2/2)
-
Equip at your own peril.
ITEM STATS: Virtual Environment Integrity — severely debased. Patch status: necessary but possibly insufficient to fully remove the curse.
Patch VMware vCenter immediately and monitor for active exploitation signs regardless.
Reward: You've received the Traversed Directory debuff. -40 to Virtual Infrastructure Confidence. Inventory slot for "Trust in Disclosure Windows" has been permanently destroyed.
#VMware #CyberSecurity #CriticalVulnerability #ZeroDay (2/2)
-
Equip at your own peril.
ITEM STATS: Virtual Environment Integrity — severely debased. Patch status: necessary but possibly insufficient to fully remove the curse.
Patch VMware vCenter immediately and monitor for active exploitation signs regardless.
Reward: You've received the Traversed Directory debuff. -40 to Virtual Infrastructure Confidence. Inventory slot for "Trust in Disclosure Windows" has been permanently destroyed.
#VMware #CyberSecurity #CriticalVulnerability #ZeroDay (2/2)
-
GeoServer zero-day confirmed actively exploited just hours after public disclosure. The flaw resides in the jsonArrayContains filter function and enables SQL injection potentially leading to full Remote Code Execution. WatchTowr observed exploitation in the wild immediately after the advisory.
#GeoServer #ZeroDay #RemoteCodeExecution #CyberSecurity
https://cyberworldops.eu/en/geoserver-zero-day-already-exploited-flaw-could-lead-to-rce
-
GeoServer zero-day confirmed actively exploited just hours after public disclosure. The flaw resides in the jsonArrayContains filter function and enables SQL injection potentially leading to full Remote Code Execution. WatchTowr observed exploitation in the wild immediately after the advisory.
#GeoServer #ZeroDay #RemoteCodeExecution #CyberSecurity
https://cyberworldops.eu/en/geoserver-zero-day-already-exploited-flaw-could-lead-to-rce
-
CRITICAL: GeoServer zero-day SQLi in jsonArrayContains enables RCE; hundreds of exploitation attempts seen post-disclosure. No patch yet — restrict access, monitor instances, and stay alert for updates. https://radar.offseq.com/threat/hackers-exploiting-unpatched-geoserver-zero-day-5275891a4dbafdf9 #OffSeq #GeoServer #Infosec #ZeroDay
-
CRITICAL: GeoServer zero-day SQLi in jsonArrayContains enables RCE; hundreds of exploitation attempts seen post-disclosure. No patch yet — restrict access, monitor instances, and stay alert for updates. https://radar.offseq.com/threat/hackers-exploiting-unpatched-geoserver-zero-day-5275891a4dbafdf9 #OffSeq #GeoServer #Infosec #ZeroDay
-
CRITICAL: GeoServer zero-day SQLi in jsonArrayContains enables RCE; hundreds of exploitation attempts seen post-disclosure. No patch yet — restrict access, monitor instances, and stay alert for updates. https://radar.offseq.com/threat/hackers-exploiting-unpatched-geoserver-zero-day-5275891a4dbafdf9 #OffSeq #GeoServer #Infosec #ZeroDay
-
CRITICAL: GeoServer zero-day SQLi in jsonArrayContains enables RCE; hundreds of exploitation attempts seen post-disclosure. No patch yet — restrict access, monitor instances, and stay alert for updates. https://radar.offseq.com/threat/hackers-exploiting-unpatched-geoserver-zero-day-5275891a4dbafdf9 #OffSeq #GeoServer #Infosec #ZeroDay
-
Microsoft attempted to invoke legal pressure to halt Eclipse's disclosures. Eclipse responded by publishing another one anyway. Like threatening a shark with a stern letter, really.
Operators: assess whether the RoguePlanet patch remains sufficient or if ShieldBreak constitutes a full bypass requiring additional mitigations.
Reward: You've received a Soulless EULA Scroll — binding, unreadable, and deeply cursed.
#ZeroDay #Windows #CyberSecurity #Vulnerability #InfoSec #ShieldBroken (2/2)
-
Microsoft attempted to invoke legal pressure to halt Eclipse's disclosures. Eclipse responded by publishing another one anyway. Like threatening a shark with a stern letter, really.
Operators: assess whether the RoguePlanet patch remains sufficient or if ShieldBreak constitutes a full bypass requiring additional mitigations.
Reward: You've received a Soulless EULA Scroll — binding, unreadable, and deeply cursed.
#ZeroDay #Windows #CyberSecurity #Vulnerability #InfoSec #ShieldBroken (2/2)
-
Microsoft attempted to invoke legal pressure to halt Eclipse's disclosures. Eclipse responded by publishing another one anyway. Like threatening a shark with a stern letter, really.
Operators: assess whether the RoguePlanet patch remains sufficient or if ShieldBreak constitutes a full bypass requiring additional mitigations.
Reward: You've received a Soulless EULA Scroll — binding, unreadable, and deeply cursed.
#ZeroDay #Windows #CyberSecurity #Vulnerability #InfoSec #ShieldBroken (2/2)
-
Συναγερμός για τον GeoServer: μια νέα zero-day ευπάθεια δέχεται ήδη προσπάθειες εκμετάλλευσης, πριν κυκλοφορήσει επίσημη επιδιόρθωση.
Οι επιθέσεις που καταγράφηκαν μέχρι τώρα φαίνεται να προκαλούν σφάλματα — όμως αυτό μπορεί να αλλάξει σύντομα.
Αν ο οργανισμός σου χρησιμοποιεί GeoServer, η δημόσια πρόσβαση ίσως τον εκθέτει.
Δες τι γνωρίζουμε και τι πρέπει να ελεγχθεί τώρα.
#Cybersecurity #ZeroDay #GeoServer #SQLInjection #RemoteCodeExecution
-
⚠️ Attackers target zero-day vulnerability in geospatial data platform GeoServer
📝 Security researchers have seen evidence that attac...
📰 CSO Online