Technology ❯ Cybersecurity ❯ Vulnerabilities

Zero-Day Exploits

Microsoft SharePoint Google Chrome CVE-2024-43461 Microsoft Software CVE-2025-10585 CVE-2025-43300 Windows Vulnerabilities Apple Security Updates Ivanti WhatsApp Remote Code Execution CVE-2025-2783 Microsoft Security Updates Android Security Qualcomm Chips CVE-2025-27363 AI Products Firefox Account Takeover CVE-2025-4918 CVE-2025-4919 CVE-2025-5419 WinRAR CVE Identifiers Spyware Event Highlights macOS Vulnerabilities CISA CVE-2025-7775 Hacking Groups Incident Response CVE-2025-49706 Fortinet VPN Products Microsoft SharePoint Hack Microsoft Products CVE-2025-40599 SonicWall SSL VPN Android Vulnerabilities ImageIO Framework Cisco Cisco Firewalls Microsoft Exchange Server CVE-2025-38352 Cisco IOS User Interaction Out-of-Bounds Write State-Sponsored Attacks CVE-2025-4428 CVE-2025-4427 CVE-2025-21043 Oracle E-Business Suite CVE-2025-27915 CVE-2021-43798 Zimbra Collaboration Suite Gogs Chakra JavaScript Engine CVE-2025-11371 Emergency Updates DNG Image Files LNK File Vulnerability CVE-2025-14372 CVE-2025-21042 CVE-2025-5777 CVE-2025-13223 CVE-2025-14373 CVE-2025-20337 Privilege Escalation Cisco ISE Software Patches CVE-2025-20393 Downgrade Attacks Cisco AsyncOS NAS Devices CVE-2024-43047 CVE-2024-43093 Apple Security RomCom Hacking Group Firewall Exploits Fortinet Firewalls PostgreSQL Windows Cyberattacks Patches Apple Software Updates State Actors Micro Patching

China-Linked Hackers Exploit Cisco Email Zero-Day With No Patch as CISA Flags Active Threat

Talos links the activity to UAT-9686, with Cisco urging restricted exposure pending rebuilds until a fix arrives.

Apple, Google Rush Patches as CISA Flags WebKit Zero‑Day Exploits

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

Google Ships Emergency Chrome Patch for Eighth 2025 Zero-Day Exploit

CISA Orders Chrome Zero-Day Fix as Google Rushes V8 Patch

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

Pwn2Own Ireland Awards $1.02 Million for 73 Zero‑Days as Summoning Team Wins Master of Pwn

Microsoft Restricts IE Mode in Edge After Zero-Day Exploits

Active Exploits Target Gladinet CentreStack and TrioFox Zero-Day That Can Lead to RCE

GreyNoise Flags 500% Surge in Scans on Palo Alto Login Portals on Oct. 3

CISA Issues Emergency Order as ArcaneDoor Exploits Cisco Firewall Zero‑Days

CISA Discloses Malware Behind Ivanti EPMM Zero-Day Intrusions, Publishes IOCs and Detection Rules

Apple Backports ImageIO Zero‑Day Fix to Older iPhones and iPads

France’s Cyber Agency Confirms Apple’s Sept. 3 Spyware Threat Alerts, Fourth This Year

Samsung Releases Patch for Actively Exploited Android Zero‑Day CVE-2025-21043

Google Patches Two Exploited Android Zero-Days in Wide September Update

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

Samsung Begins Rolling Out September 2025 Security Patch With 25 Extra Galaxy Fixes

Apple Patches Zero-Click ImageIO Exploit Used in Targeted Attacks