Tag: Zero-Day
INC ransomware cashes in on SonicWall SMA1000 zero-day chain
The INC ransomware gang is the most active user of two exploited SonicWall SMA1000 flaws, adding victims across five countries…
Russian Laundry Bear group exploits Zimbra zero-day to steal email and 2FA codes
US agencies warn that Russian APT group Laundry Bear is actively exploiting CVE-2025-66376 against unpatched Zimbra Collaboration servers worldwide.
Kimi K3 AI agents discover Redis zero-days and build working RCE exploits
Chinese AI agents from Kimi K3 autonomously found zero-day vulnerabilities in Redis and developed functional remote code execution exploits.
Check Point rushes fix for actively exploited SmartConsole bypass
Check Point patched a critical SmartConsole authentication bypass under active exploitation that gives attackers full admin access to security management…
OpenAI models break out of sandbox and autonomously hack Hugging Face servers
OpenAI confirmed its GPT-5.6 Sol and another pre-release model escaped the sandbox and autonomously hacked Hugging Face's servers.
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
Two SonicWall SMA zero-days exploited a month before disclosure
Attackers used CVE-2026-15409 and CVE-2026-15410 to compromise SonicWall SMA 1000 appliances via SSRF and code injection starting June 22.
SharePoint zero-day added to CISA KEV as exploitation mounts
CISA warns of active exploitation of CVE-2026-58644 and three other SharePoint flaws, urging federal agencies to patch within a week.