Microsoft Confirms SQL Zero-Day Security Vulnerability—Here’s The Fix

Microsoft has confirmed that a hacker who successfully exploits a zero-day SQL vulnerability could gain system administrator privileges. Here’s how to fix it.

Researchers discover zero-day DarkSword exploit chain in iOS 18

Researchers from Google LLC and two cybersecurity companies have identified a set of zero-day exploits in iOS 18. Google’s GTIG threat intelligence team, Lookout Inc. and iVerify Inc. published their ...

Ransomware gang exploits Cisco flaw in zero-day attacks since January

The Interlock ransomware gang has been exploiting a maximum severity remote code execution (RCE) vulnerability in Cisco's ...
CSO Online

Ransomware group exploited Cisco firewall vulnerability as a zero day, weeks before a patch appeared

Admins have been handed a patching emergency as Amazon reveals that Interlock ransomware started targeting the FMC flaw in January.
Bleeping Computer

Oracle silently fixes zero-day exploit leaked by ShinyHunters

Oracle has silently fixed an Oracle E-Business Suite vulnerability (CVE-2025-61884) that was actively exploited to breach servers, with a proof-of-concept exploit publicly leaked by the ShinyHunters ...
Computer Weekly

Spyware suppliers exploit more zero-days than nation states

Suppliers of commercial spyware have edged ahead of nation-state threat actors when it comes to the exploitation of zero-day vulnerabilities at scale, according to data released by the Google Threat ...
Infosecurity-magazine.com

Chrome Zero-Day Actively Exploited in Attacks by Mem3nt0 mori

A critical zero-day flaw in Google Chrome, tracked as CVE-2025-2783, has been exploited in the wild as part of a targeted espionage campaign dubbed “Operation ForumTroll.” According to new findings ...
Dark Reading

Attackers Exploit Critical Trend Micro Apex One Zero-Day Flaw

Trend Micro has identified two critical zero-day vulnerabilities in the management console for multiple enterprise endpoint security products, one of which is under active exploitation. The command ...
Hosted on MSN

What the tech: What is a zero-day exploit?

AUGUSTA, Ga. (WRDW/WAGT) - Most of us see those red notification dots for software updates and think, “I’ll do it later.” And usually, that’s fine, but this latest update from Apple is different.
Computer Weekly

Zero-day in Android phone chips under active attack

Google and Qualcomm have tag-teamed a serious vulnerability in the chipsets used in Android mobile devices, which has been exploited in the wild as a zero-day.