Topic: zero day initiative

  • Synology Patches Critical BeeStation Flaws Exposed at Pwn2Own

    Synology Patches Critical BeeStation Flaws Exposed at Pwn2Own

    Synology released a critical security update for BeeStation devices to fix a remote code execution vulnerability (CVE-2025-12686) caused by an unchecked buffer copy operation. The flaw was exploited live at Pwn2Own Ireland 2025, earning researchers a $40,000 prize, and users must upgrade to BeeSt...

    Read More »
  • SolarWinds Issues Urgent Patch for Critical Web Help Desk Flaw

    SolarWinds Issues Urgent Patch for Critical Web Help Desk Flaw

    SolarWinds has released an urgent hotfix for a critical, unauthenticated remote code execution vulnerability (CVE-2025-26399) in its Web Help Desk software, which poses a severe risk to affected systems. The flaw is a patch bypass for a previous vulnerability and stems from unsafe deserialization...

    Read More »
  • Hackers Exploit 29 Zero-Days at Pwn2Own Automotive

    Hackers Exploit 29 Zero-Days at Pwn2Own Automotive

    The Pwn2Own Automotive 2026 hacking competition awarded nearly half a million dollars on its second day, highlighting the critical need to secure modern vehicle systems like EV chargers and infotainment units. Leading team Fuzzware.io earned $213,000, including $95,000 for exploiting zero-day fla...

    Read More »