Vulnerability Research
Chaotic Eclipse dropped FalconFlank, a proof-of-concept for a zero-day privilege-escalation flaw in CrowdStrike Falcon Sensor that abuses the product's malicious-macro remediation. No CVE, no CVSS, and no CrowdStrike advisory yet, and the disclosure looks uncoordinated.
Artificial Intelligence (AI)
Fourteen thousand unknown flaws from one pipeline. Palo Alto Unit 42 says its NOVA system surfaced 14,000-plus previously unknown vulnerabilities across the open-source software supply chain — a scale that raises a hard question maintainers can't ignore: who triages them, and how many are real?
Vulnerabilities
Twenty-four hours separated disclosure from in-the-wild exploitation — CISA's emergency directive gives federal agencies three days to patch.
Vulnerabilities
Google Threat Intelligence confirmed mass exploitation of an Oracle PeopleSoft zero-day by ShinyHunters; universities are the primary target and the extortion has begun.
Vulnerabilities
The largest Patch Tuesday on record arrives with three publicly disclosed zero-days — and a running feud with one researcher producing a steady stream of Microsoft exploits.
Vulnerabilities
The fifth in-the-wild Chrome zero-day of the year, in the V8 JavaScript engine, is now patched — but the attack pattern shows no sign of slowing.
Vulnerabilities
A logic-flow weakness in Check Point's Remote Access VPN gave a Qilin ransomware affiliate and other attackers a month to operate before a patch arrived.
Vulnerabilities
Cisco warns that CVE-2026-20245, a zero-day in Catalyst SD-WAN Manager, is being exploited to gain root, with no patch available. Exploitation needs netadmin access — obtainable by chaining CVE-2026-20182 — making it Cisco's seventh exploited SD-WAN zero-day of 2026.
Vulnerabilities
Google's June 2026 Android update fixes CVE-2025-48595, an Android Framework integer overflow that Google says may be under limited, targeted exploitation. Because the Framework is the API layer every app touches, the flaw can hand an attacker complete control of an unpatched device.
Cybersecurity 101
Zero-day exploit, vulnerability, and attack are three stages on one timeline — the unknown flaw, the code that weaponizes it, and the moment it hits a target. How they connect, why the distinction matters, and how to defend.
Cybersecurity 101
An exploit is the code or technique that turns a vulnerability into a real intrusion. What an exploit is, how it differs from a vulnerability and a payload, the main types, where they come from, and how to defend.
Vulnerabilities
Google's Threat Intelligence Group caught attackers exploiting CVE-2026-5426, a hardcoded ASP.NET machineKey in Digital Knowledge's KnowledgeDeliver LMS, to forge ViewState payloads, drop the Godzilla web shell, and stage Cobalt Strike Beacon. The patch alone is not enough.