CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks.

A new United Arab Emirates-based startup is offering up to $20 million for hacking tools that could help governments break into any smartphone with a text message. Apart from the highest bounty of $20 ...

Apple's DarkSword threat: A web-delivered exploit chain, CVE-2026-20700, is actively targeting iPhones, prompting Apple to release an urgent update. cPanel backdoor abuse: CVE-2026-41940 lets ...

Chaotic Eclipse drops seventh Windows zero‑day, “RoguePlanet,” hours after Patch Tuesday Race‑condition exploit grants SYSTEM privileges; PoC confirmed viable by ThreatLocker Researcher continues ...

Researchers from Google LLC and two cybersecurity companies have identified a set of zero-day exploits in iOS 18. Google’s GTIG threat intelligence team, Lookout Inc. and iVerify Inc. published their ...

A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "MiniPlasma" that lets attackers gain SYSTEM privileges on fully patched Windows ...

Cybersecurity firm Kaspersky has detailed more of its findings on the distribution of malware through a zero-day exploit it uncovered in Google Chrome earlier this year. The exploit was executed ...

Chinese state hackers and spyware vendors are fueling a rise in zero-day attacks, which increasingly target enterprise software and devices — security and networking products in particular. Google ...

Q: I keep hearing scary warnings about “zero day exploits” on the news. I’m still using an older Windows 10 PC that works fine for email and web browsing. What exactly is a zero day exploit, and how ...