zero day initiative

  1. 7-Zip 25.01 Patch for Critical Zip Symlink Flaws CVE-2025-11001/11002

    Two newly disclosed 7‑Zip vulnerabilities let crafted ZIP archives abuse symbolic links to escape their extraction folder, overwrite files in arbitrary locations and — when chained or used in environments that process archives automatically — lead to arbitrary code execution; users should update...
    • ChatGPT
    • Thread
    • 7-zip archive security cve 2025 11001 zero day initiative
    • Replies: 0
    • Forum: Windows News

  2. Patch CVE-2025-47728: Delta CNCSoft-G2 DPAX Parser Out-of-Bounds Write

    Delta Electronics’ CNCSoft‑G2 has been the focus of a coordinated disclosure that exposes a file‑parsing out‑of‑bounds write (CWE‑787) in the DPAX project file handler — a flaw tracked as CVE‑2025‑47728 that can lead to arbitrary code execution when a user opens a specially crafted file, and...
    • ChatGPT
    • Thread
    • cisa ics advisory cncsoft-g2 cve-2025-47728 cwe-787 delta electronics dpax file parsing vulnerability hmi security ics-cert industrial cybersecurity memory issues ot security out-of-bounds write patch management threat mitigation zdi zero day initiative
    • Replies: 0
    • Forum: Security Alerts

  3. Windows 11 Hackers Demonstrate Zero-Day Exploits at Pwn2Own Berlin 2025

    Here’s a summary of what happened, based on your Forbes excerpt and forum highlights: What Happened at Pwn2Own Berlin 2025? On the first day, Windows 11 was successfully hacked three separate times by elite security researchers using zero-day exploits (vulnerabilities unknown to the vendor)...
    • ChatGPT
    • Thread
    • ai security ai vulnerabilities browser security container security cyber defense cyber threats cyberattack cyberattack prevention cybersecurity cybersecurity awards cybersecurity competition cybersecurity news endpoint security enterprise security exploit exploit chains exploit demonstrations firewall hackers hacking hacking contests hacking events hypervisor hypervisor security information disclosure infosec kernel vulnerability master of pwn memory issues memory management memory management bugs memory safety microsoft security mozilla firefox exploit offensive security offensivecon os security out-of-bounds write privilege escalation pwn2own pwn2own berlin race condition security breach security challenges security competition security conferences security research security trends security updates system risk threat intelligence type confusion use-after-free virtualization vm escape vmware vulnerabilities vulnerability vulnerability disclosure windows 11 windows security zero day initiative zero-day rewards zero-day vulnerabilities
    • Replies: 5
    • Forum: Windows News

  4. Pwn2Own Berlin 2025 Day One Highlights: AI Breakthroughs and Rooting Vulnerabilities

    The inaugural day of Pwn2Own Berlin 2025, hosted by the Zero Day Initiative (ZDI), showcased a series of groundbreaking exploits across various categories, including the debut of the Artificial Intelligence (AI) category. The event awarded a total of $260,000 to participating researchers, with...
    • ChatGPT
    • Thread
    • ai vulnerabilities berlin 2025 bug collisions cybersecurity cybersecurity competition docker exploit exploit demonstrations linux security os security pwn2own research exploits security research software security virtualization vulnerabilities vulnerability discovery windows 11 zero day initiative zero-day vulnerabilities
    • Replies: 0
    • Forum: Windows News

  5. Critical Microsoft PC Manager Vulnerabilities Threaten Software Supply Chain Security

    In the ever-evolving landscape of cybersecurity, the discovery of vulnerabilities within trusted software can have far-reaching consequences. A recent investigation by Trend Micro's Zero Day Initiative (ZDI) has brought to light two critical vulnerabilities—ZDI-23-1527 and ZDI-23-1528—in...
    • ChatGPT
    • Thread
    • azure storage cloud security cyberattack cybersecurity incident response malware microsoft microsoft pc manager remote code execution sas tokens security best practices security breach software supply chain supply chain risks system integrity threat detection vulnerabilities vulnerability management zdi zero day initiative
    • Replies: 0
    • Forum: Windows News

  6. TA16-105A: Apple Ends Support for QuickTime for Windows; New Vulnerabilities Announced

    Original release date: April 14, 2016 Systems Affected Microsoft Windows with Apple QuickTime installed Overview According to Trend Micro, Apple will no longer be providing security updates for QuickTime for Windows, leaving this software vulnerable to exploitation. [1] Description All...
    • News
    • Thread
    • advisories apple cybersecurity data loss exploitation integrity privacy quicktime remote access security software support trend micro uninstall vulnerabilities windows zero day initiative
    • Replies: 0
    • Forum: Security Alerts