Zero-Day Vulnerabilities

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

13stories this week

0today

the last seven days

Most fromThe Hacker News, Security Affairs, BleepingComputer, CSO Online UK

In the news hereCisco3 Ivanti2 Palo Alto Networks2 Apple1

Exploited
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks

September 29, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Nation-State Threats, Zero-Day Vulnerabilities, Threat Intelligence

Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according to Apple.
Dark Reading
Exploited
Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected

September 29, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Mandiant researchers said dozens of organizations have been impacted by attacks attributed to advanced and suspected state-sponsored threat groups. They expect more attacks to come.
CyberScoop
Exploited
Hackers exploit Citrix NetScaler zero-day to deploy web shells

September 29, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into internal networks.
BleepingComputer
Exploited
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services

September 29, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, UK Cyber Attacks, Zero-Day Vulnerabilities, UK Cyber Security News, Threat Intelligence

Two questions remain: who is abusing the CVEs? And why did Citrix take so long to disclose?
The Register
Exploited
Apple patches CoreGraphics zero-day already exploited in targeted attacks

September 29, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, UK Cyber Attacks, Zero-Day Vulnerabilities, UK Cyber Security News, Threat Intelligence

Meta-spotted flaw could hand attackers arbitrary code execution via a maliciously crafted file…
The Register
Exploited
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

September 29, 2026

Global Cyber Security, Nation-State Threats, Zero-Day Vulnerabilities, Threat Intelligence

The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers’ networks.
Dark Reading
Exploited
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

September 29, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Apple patched zero-day CVE-2026-86950 in CoreGraphics, exploited in sophisticated targeted attacks against specific iOS users. Apple has released security updates for iOS, iPadOS and macOS to fix a zero-day vulnerability, tracked as CVE-2026-86950, in CoreGraphics that may have been exploited in attacks against specific individuals. The flaw is an out-of-bounds write that can lead to…
Security Affairs
Exploited
Apple patches CoreGraphics zero-day flaw exploited in attacks

September 29, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Apple released security updates to fix a zero-day vulnerability exploited in “extremely sophisticated” targeted attacks on iOS devices.
BleepingComputer
Exploited
Apple Patches Zero-Day Linked to ‘Extremely Sophisticated Attack’

September 29, 2026

Data Breaches, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Apple released iOS and macOS updates to patch a zero-day vulnerability (CVE-2026-86950) reported by Meta’s product security team.
SecurityWeek
Exploited
Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)

September 28, 2026

Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is already being exploited. iOS and macOS 27 are not affected. Today&#;x26;#;39;s update for the current “27” branch does not address security issues,…
SANS Internet Storm Center
Exploited
U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

September 28, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-88771 (CVSS score: 9.5) is a remote code execution vulnerability caused by improper input validation that could allow an…
Security Affairs
Exploited
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild

September 28, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise. A Roundcube Webmail vulnerability, tracked as CVE-2026-48842 (CVSS score of 8.1) and patched four months ago, is now being exploited in the wild. The Canadian Centre for Cyber Security added the warning to its advisory…
Security Affairs

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Zero-Day Vulnerabilities

Stay ahead in Cyber Security.