Tag: Zero-Day
Volt Typhoon rebuilds its relay chain in under two minutes
Black Lotus Labs mapped four years of throwaway relay hops that carried at least four zero-day exploits into US networks.
One hacked laptop can become root on every Tailscale server
A researcher showed that Tailscale SSH port forwarding turns a single compromised device into fleet-wide root access, and self-hosted headscale…
A read-only tenant login is enough to own VeloCloud
Arista patched an exploited SQL injection in VeloCloud Orchestrator that lets the lowest-privilege account become a superuser operator.
Chinese spies rode a BeyondTrust zero-day into support appliances
A suspected China-nexus crew spent weeks inside Remote Support boxes before anyone noticed.
Palo Alto patches a firewall zero-day hit by limited attacks
A PAN-OS flaw in the management interface lets an authenticated attacker run code as root, and CISA wants federal systems…
An unauthenticated attachment bug hands root on Cisco email gear
Attackers are already exploiting a critical Secure Email Gateway flaw that hands over root access, and federal agencies have three…
Microsoft Patch Tuesday wave carries 1,413 fixes for October
October's update wave is the largest Microsoft has ever shipped, and one Windows Shell bug is already under attack.
Ivanti VPN chain exploits CVE-2026-104935 for root access
A previously unknown crew used a three-bug chain to take full control of fully patched Ivanti Connect Secure appliances.