RoguePlanet now has a CVE and a patch in the works, a week after the disclosure of a PoC.

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities ...

A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "MiniPlasma" that lets attackers gain SYSTEM privileges on fully patched Windows ...

Mandiant details exploitation of CVE-2026-20245, a Cisco Catalyst SD-WAN vulnerability exploited as a zero-day months prior ...

Update 5/21: Since this article was released, recommend mitigations for YellowKey and other attacks have been released, as well as a full patch for BlueHammer. A cyber security expert that goes by the ...

Researchers from Google LLC and two cybersecurity companies have identified a set of zero-day exploits in iOS 18. Google’s GTIG threat intelligence team, Lookout Inc. and iVerify Inc. published their ...

On the second day of Pwn2Own Automotive 2026, security researchers collected $439,250 in cash awards after exploiting 29 unique zero-days. The Pwn2Own Automotive hacking contest focuses on automotive ...

Chaotic Eclipse drops seventh Windows zero‑day, “RoguePlanet,” hours after Patch Tuesday Race‑condition exploit grants SYSTEM privileges; PoC confirmed viable by ThreatLocker Researcher continues ...

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Microsoft confirms Exchange zero-day, CISA warns it's under active exploitation. Updated May ...

Emily Long is a freelance writer based in Salt Lake City. After graduating from Duke University, she spent several years reporting on the federal workforce for Government Executive, a publication of ...

A zero-day vulnerability in the Qualcomm chipsets used by many Android mobile devices is being actively exploited in the wild, according to Google, and system users should apply the relevant updates ...

A critical Adobe Acrobat zero-day has been exploited for months via malicious PDFs to steal data and potentially take over systems, with no patch yet available. Attackers have been exploiting a ...