Live and recent posts from across the Fediverse tagged #zerodayinitiative, aggregated by home.social.
Microsoft Disrupts 1,413 Vulnerabilities, Fixes Exploited Windows Shell Bug
Microsoft just dropped a record-breaking Patch Tuesday update, tackling a whopping 1,413 vulnerabilities - and yes, that includes a critical Windows Shell bug that's already being exploited. This massive release underscores a new normal in cybersecurity: hundreds of fixes are no longer an exception, but the baseline.
At Pwn2Own Ireland in Cork on 8 October 2026, three teams remotely compromised Google Pixel 10 phones with all available updates installed.
Three of four remote attempts against the Pixel 10 succeeded, earning a combined $562,500.
The teams submit their demonstrations and reports to the Zero Day Initiative, which forwards the reported issues to affected companies.
These are contest results; the brief does…
https://en.hacks.gr/treis-omades-mpikan-apo-apostasi-se-pliros-enimeromena-google-pixel-10/
#GooglePixel10 #Pwn2OwnIreland #ZeroDayInitiative #TrendMicro
Hackers Expose 32 Zero-Day Flaws in Pwn2Own Ireland Contest
In just one day, top ethical hackers at Pwn2Own Ireland 2026 uncovered a staggering 32 zero-day vulnerabilities, raking in over $368,000 in prizes and showcasing the impressive skills of today's cybersecurity experts. This impressive haul highlights the vast attack surfaces of modern technology and the talent of the global…
#ZeroDayInitiative #Pwn2ownIreland #ZeroDayFlaws #EthicalHacking #SmartHomeDevices
7-Zip Patches RCE Flaw in XZ-Compressed Data Handling
Don't risk your files! 7-Zip's latest update, version 26.02, patches a critical vulnerability that could let hackers take control when you open a malicious archive.
#RemoteCodeExecution #7zip #XzcompressedData #ZeroDayInitiative #VulnerabilityPatch
Progress LoadMaster Flaw Lets Attackers Run Root Commands Pre-Auth
A critical flaw in Progress Kemp LoadMaster, known as CVE-2026-8037, allows attackers to run root commands without authentication - but a patch is now available to fix this gaping security hole. This vulnerability, scoring a severe 9.8, can be exploited with a simple crafted API request.
#ZeroDayInitiative #Loadmaster #Cve20268037 #PreauthVulnerability #ArbitraryCodeExecution
Si usan #Telegram en #Android o en #GNULinux, desinstálenlo ya mismo (al menos, hasta que logren solucionar la GRAVÍSIMA vulnerabilidad que descubrió #TrendAI #ZeroDayInitiative).
Yo ya lo desinstalé. De momento, estaré usando la versión web (la cual no está afectada por esta brecha de seguridad).
Pwn2Own Ireland 2025: The Hacks, The Winners, and The Big Payouts https://hackread.com/pwn2own-ireland-2025-hacks-winners-payouts/ #ZeroDayInitiative #EthicalHacking #Cybersecurity #Vulnerability #Technology #BugBounty #Security #Ireland #Pwn2Own #0day #Cork #ZDI
#IvantiEndpointManager: #ZeroDayInitiative veröffentlicht 13 Zero-Days | Security https://www.heise.de/news/Ivanti-Endpoint-Manager-Zero-Day-Initiative-veroeffentlicht-13-Zero-Days-10749054.html #ZeroDay #exploit #0day #Ivanti
Schwachstellenforschung: #ZeroDayInitiative feiert 20. Geburtstag 🎂 | Security https://www.heise.de/news/Schwachstellenforschung-Zero-Day-Initiative-feiert-20-Geburtstag-10538210.html #ZDI
Six 0-Days Lead Microsoft’s August 2024 Patch Push https://krebsonsecurity.com/2024/08/six-0-days-lead-microsofts-august-2024-patch-push/ #ZeroDayInitiative #MicrosoftProject #CVE-2024-38106 #CVE-2024-38107 #CVE-2024-38178 #CVE-2024-38189 #CVE-2024-38193 #CVE-2024-38213 #markoftheweb #TimetoPatch #WindowsEdge #KevBreen
Six 0-Days Lead Microsoft’s August 2024 Patch Push
https://krebsonsecurity.com/2024/08/six-0-days-lead-microsofts-august-2024-patch-push/
#ZeroDayInitiative #MicrosoftProject #CVE-2024-38106 #CVE-2024-38107 #CVE-2024-38178 #CVE-2024-38189 #CVE-2024-38193 #CVE-2024-38213 #markoftheweb #TimetoPatch #WindowsEdge #KevBreen
CVE-2024-21412: Water Hydra Targets Traders With Microsoft Defender SmartScreen Zero-Day
The APT group Water Hydra has been exploiting the Microsoft Defender SmartScreen vulnerability (CVE-2024-21412) in its campaigns targeting financial market traders. This vulnerability, which has now been patched by Microsoft, was discovered and disclosed by the Trend Micro Zero Day Initiative.
Pulse ID: 65ccf05c096720a8d921e148
Pulse Link: https://otx.alienvault.com/pulse/65ccf05c096720a8d921e148
Pulse Author: AlienVault
Created: 2024-02-14 16:54:52
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Microsoft #ZeroDayInitiative #ZeroDay #Vulnerability #TrendMicro #AlienVault
📬 WinRAR-Bug ermöglichte das Starten von Schadsoftware beim Öffnen von RAR-Archiven
#ITSicherheit #CVE202340477 #goodbyeselene #RARLab #Windows11 #WinRAR #ZeroDayInitiative https://tarnkappe.info/artikel/it-sicherheit/winrar-bug-ermoeglichte-das-starten-von-schadsoftware-beim-oeffnen-von-rar-archiven-279823.html
📬 TP-Link-Router: Botnetz-Malware nutzt Sicherheitslücke aktiv aus
#Malware #AX1800 #Botnetz #DDoS #FirmwareUpdate #mirai #router #Schwachstelle #Sicherheitslücke #TPLink #ValveSourceEngine #ZeroDayInitiative https://tarnkappe.info/artikel/it-sicherheit/malware/tp-link-router-botnetz-malware-nutzt-sicherheitsluecke-aktiv-aus-273536.html
Microsoft Patch Tuesday, March 2023 Edition
https://krebsonsecurity.com/2023/03/microsoft-patch-tuesday-march-2023-edition/
#MicrosoftPatchTuesdayMarch2023 #Microsoft365AppsforEnterprise #WindowsSmartScreen #ZeroDayInitiative #TheComingStorm #CVE-2023-23397 #CVE-2023-24800 #SecurityTools #ImmersiveLabs #DustinChilds #TimetoPatch #KevinBreen #Rapid7
Microsoft Patch Tuesday, March 2023 Edition
https://krebsonsecurity.com/2023/03/microsoft-patch-tuesday-march-2023-edition/
#MicrosoftPatchTuesdayMarch2023 #Microsoft365AppsforEnterprise #WindowsSmartScreen #ZeroDayInitiative #TheComingStorm #CVE-2023-23397 #CVE-2023-24800 #SecurityTools #ImmersiveLabs #DustinChilds #TimetoPatch #KevinBreen #Rapid7
Microsoft Patch Tuesday, March 2023 Edition https://krebsonsecurity.com/2023/03/microsoft-patch-tuesday-march-2023-edition/ #MicrosoftPatchTuesdayMarch2023 #Microsoft365AppsforEnterprise #WindowsSmartScreen #ZeroDayInitiative #TheComingStorm #CVE-2023-23397 #CVE-2023-24800 #SecurityTools #ImmersiveLabs #DustinChilds #TimetoPatch #KevinBreen #Rapid7
Microsoft Patch Tuesday, March 2023 Edition
https://krebsonsecurity.com/2023/03/microsoft-patch-tuesday-march-2023-edition/
#MicrosoftPatchTuesdayMarch2023 #Microsoft365AppsforEnterprise #WindowsSmartScreen #ZeroDayInitiative #TheComingStorm #SecurityTools #ImmersiveLabs #CVE202323397 #CVE202324800 #DustinChilds #TimetoPatch #KevinBreen #Rapid7
Just reading through the #ZeroDayInitiative update review. Surprising there are a lot of printer driver RCEs. Also one public known and already exploitable CVE.
🔗 https://www.zerodayinitiative.com/blog/2023/3/14/the-march-2023-security-update-review
Patch Now: Serious Linux Kernel Security Hole ksmbd Uncovered
https://www.linuxtoday.com/news/patch-now-serious-linux-kernel-security-hole-ksmbd-uncovered/
#ZeroDayInitiative #Linux5.15 #Security #bugfix #ksmbd #News
📬 Galaxy S22 mehrfach gehackt: Pwn2Own’er zerlegen Samsung
#Hacking #Veranstaltung #AndroidUpdates #PentestLimited #Pwn2Own #SamsungGalaxyS22 #ZeroDayInitiative #ZeroDayExploit #ZeroDaySchwachstelle https://tarnkappe.info/artikel/hacking/galaxy-s22-mehrfach-gehackt-pwn2owner-zerlegen-samsung-260723.html
📬 Exchange Server hat Löcher wie ein Schweizer Käse
#Hacking #AhnLab #ExchangeServer #Lockbit #PiotrBazydlo #WebShell #ZeroDayInitiative #ZeroDaySchwachstellen https://tarnkappe.info/artikel/hacking/exchange-server-hat-loecher-wie-ein-schweizer-kaese-257781.html
‘Wormable’ Flaw Leads January 2022 Patch Tuesday https://krebsonsecurity.com/2022/01/wormable-flaw-leads-january-2022-patch-tuesday/ #MicrosoftPatchTuesdayJanuary2022 #nationalsecurityagency #HTTPProtocolStack #ZeroDayInitiative #LatestWarnings #TheComingStorm #CVE-2021-22947 #CVE-2021-36976 #CVE-2022-21846 #CVE-2022-21907 #ExchangeServer #DustinChilds #SatnamNarang #TimetoPatch #trendmicro #Tenable #Rapid7
Patch Tuesday, November 2020 Edition https://krebsonsecurity.com/2020/11/patch-tuesday-november-2020-edition/ #WindowsNetworkFileSystem #MicrosoftExchangeServer #ZeroDayInitiative #CVE-2020-15999 #CVE-2020-16875 #CVE-2020-17051 #CVE-2020-17087 #SecurityTools #DustinChilds #TimetoPatch #trendmicro #BobHuber #Tenable