Topic: zero day initiative
-
Synology Patches Critical BeeStation Flaws Exposed at Pwn2Own
Synology released a critical security update for BeeStation devices to fix a remote code execution vulnerability (CVE-2025-12686) caused by an unchecked buffer copy operation. The flaw was exploited live at Pwn2Own Ireland 2025, earning researchers a $40,000 prize, and users must upgrade to BeeSt...
Read More » -
SolarWinds Issues Urgent Patch for Critical Web Help Desk Flaw
SolarWinds has released an urgent hotfix for a critical, unauthenticated remote code execution vulnerability (CVE-2025-26399) in its Web Help Desk software, which poses a severe risk to affected systems. The flaw is a patch bypass for a previous vulnerability and stems from unsafe deserialization...
Read More » -
Hackers Exploit 29 Zero-Days at Pwn2Own Automotive
The Pwn2Own Automotive 2026 hacking competition awarded nearly half a million dollars on its second day, highlighting the critical need to secure modern vehicle systems like EV chargers and infotainment units. Leading team Fuzzware.io earned $213,000, including $95,000 for exploiting zero-day fla...
Read More »