zero-day

Cyble’s latest weekly scan shows a dizzying pace of disclosures and exploitation: researchers tracked 908 new vulnerabilities in the last seven days and report that more than 188 of those already have publicly available proofs‑of‑concept (PoCs), tightening the window defenders have to respond...

CISA’s addition of a single entry to its Known Exploited Vulnerabilities (KEV) Catalog this week — CVE-2025-43300, an out‑of‑bounds write in Apple’s Image I/O framework — sharpens the spotlight on a zero‑day that Apple says was exploited in highly targeted attacks and underscores how quickly...

The Indian Computer Emergency Response Team (CERT-In) on 18 August 2025 issued a high‑risk advisory warning that multiple critical vulnerabilities across Microsoft’s product portfolio place millions of Windows and Office users in India — from home desktops to enterprise Azure deployments — at...

Windows 11 ships with a far stronger security baseline than its predecessors, but real-world attackers and configuration gaps still find workarounds—meaning Defender and Windows Security are necessary, not sufficient, for modern threat defense. (webpronews.com) Background Windows 11’s built-in...

Windows Security is a strong baseline for protecting Windows 11 devices, but it was never designed to be a human-proof, one-stop solution — there are modern threats that built-in tools cannot fully mitigate, and relying on default protection alone leaves significant gaps in phishing...

A use‑after‑free bug in the Windows kernel has been reported under the identifier CVE‑2025‑49761 and is described by Microsoft as an elevation‑of‑privilege vulnerability that can allow a local, authorized attacker to gain SYSTEM privileges; administrators should treat the advisory as urgent and...

A major security vulnerability has been discovered in Packet Power’s EMX and EG products, exposing critical infrastructure worldwide to the risk of unauthorized remote access and control. The vulnerability, designated CVE-2025-8284, allows attackers to bypass authentication entirely, offering a...

Lantronix Device Installer, a utility long relied upon by IT administrators for device discovery, configuration, and upgrade management across Lantronix networking hardware, now finds itself at the heart of a critical security disclosure. As cyber threats grow in sophistication, vulnerabilities...

Microsoft's March 2025 Patch Tuesday brought an extensive lineup of bug fixes, but among these was a vulnerability that would quickly escalate into a significant security incident: CVE-2025-24054, an NTLM hash-leaking flaw. While Microsoft initially considered this vulnerability "less likely" to...

A Deep Dive into April Patch Tuesday: Addressing the Exploited Windows Zero-Day and Additional Vulnerabilities A critical Windows zero-day has surfaced on April Patch Tuesday, demanding immediate attention from IT administrators. This incident highlights not only the evolving methods of cyber...

Microsoft’s recent security advisory reveals a complex, multi-stage exploit chain that has sent ripples through the cybersecurity community. The exploit centers on a zero-day vulnerability in the Windows Common Log File System (CLFS) kernel driver, tracked as CVE-2025-29824. This vulnerability...

Windows Zero‑Day: Exploited by 11 State Actors A recent investigative report reveals that a particularly dangerous Windows zero‑day vulnerability has been exploited by as many as 11 state‑sponsored hacking groups since 2017. This persistent flaw, which targets the way Windows handles NTLM...

Microsoft's latest Patch Tuesday update for March 2025 has once again put security squarely in the spotlight. In this release, Microsoft has rolled out over 50 security patches that include fixes for six dangerous zero-day vulnerabilities already being exploited in the wild. As always, this...

Microsoft’s latest Patch Tuesday has arrived with a hefty roll-out of 63 updates across Windows, Microsoft Office, and developer platforms. While this cycle might seem lighter than some previous releases, it carries crucial patches—especially for Windows—highlighting two actively exploited...

Microsoft has released its February 2025 Patch Tuesday security updates, addressing a total of 55 vulnerabilities across various Windows products. Among these, 3 are classified as critical, and 4 are zero-day vulnerabilities, with 2 actively exploited in the wild. Critical Vulnerabilities...

Attention, Windows and Microsoft Outlook users! A lurking danger has been unearthed amidst the crowd of Microsoft's January security updates. A vulnerability, identified as CVE-2025-21298, has been rated 9.8 out of 10 on the Common Vulnerabilities and Exposures (CVE) scoring scale, and it’s...

Hold onto your hats, Windows enthusiasts, because a newly disclosed vulnerability might just have you looking twice at your authentication systems. Microsoft has released crucial information detailing a Zero-Day vulnerability in Kerberos authentication protocols dubbed CVE-2025-21299. This isn’t...

As the year comes to a close, Microsoft has pulled no punches, laying out an extensive array of security updates in its December 2024 Patch Tuesday rollout. In total, a staggering 71 vulnerabilities have been addressed, with 16 categorized as critical and one particularly alarming zero-day...

In a critical alert to Windows users everywhere, Microsoft has announced a significant update as part of its December 2024 Patch Tuesday rollout, addressing a nasty zero-day vulnerability that's been causing alarm across the community. With the potential for grave exploits at play, if you’re...

In a shocking revelation that underscores the ongoing security challenges within the Windows ecosystem, security researchers have unearthed a critical zero-day vulnerability affecting all versions of Windows Workstation and Server, right from the aging Windows 7 and Server 2008 R2 to the...