zero-day vulnerability

Business

Libraesva ESG Zero-Day Exploited in Active Attacks (CVE-2025-59689)

A critical zero-day vulnerability (CVE-2025-59689) in the Libraesva Email Security Gateway is being actively exploited by a suspected state-sponsored actor,…

Read More »
Artificial Intelligence

Chrome 0-Day Patched, npm Attack, LinkedIn AI Data Scandal

A large majority (89%) of enterprise AI usage is undetected by IT and security teams, posing significant data privacy and…

Read More »
BigTech Companies

Google Patches Critical Chrome Zero-Day Flaw (CVE-2025-10585)

Google has released an urgent security update for Chrome to fix a zero-day vulnerability (CVE-2025-10585) that is being actively exploited,…

Read More »
BigTech Companies

Apple Patches Critical Zero-Day Flaw in “Extremely Sophisticated Attack”

Apple has released a critical security update to address a zero-day vulnerability (CVE-2025-43300) that was exploited in a sophisticated attack…

Read More »
BigTech Companies

Elastic Denies Zero-Day RCE Flaw in Defend EDR

Elastic denies claims of a zero-day remote code execution vulnerability in its Defend platform, refuting a public disclosure by AshES…

Read More »
Cybersecurity

SonicWall VPNs Under Attack by Rising Akira Ransomware Threat

Security researchers report a surge in ransomware attacks exploiting SonicWall SSL VPNs, possibly due to a zero-day vulnerability, even on…

Read More »
Cybersecurity

Microsoft SharePoint Zero-Day Exploited in RCE Attacks – No Fix Yet

Microsoft SharePoint is under active attack via zero-day vulnerabilities (CVE-2025-53770 and CVE-2025-53771), enabling remote code execution on on-premises servers, with…

Read More »
Cybersecurity

Critical Zero-Day Threat for Cursor & Windsurf Users Exposed

A zero-day vulnerability in AI coding tools (e.g., Cursor, Windsurf) exposed developers to machine hijacking via compromised extensions, with attackers…

Read More »
BigTech Companies

Google Chrome Critical Security Update Fixes Active Exploit (CVE-2025-6554)

Google Chrome users must urgently update their browsers to patch a critical zero-day vulnerability (CVE-2025-6554) in the V8 JavaScript engine,…

Read More »