Microsoft Defender, our supposed digital guardian, is bleeding vulnerabilities. Two zero-days are actively exploited, one granting SYSTEM privileges, the other locking down devices entirely.
A new Windows zero-day, dubbed YellowKey, is exposing BitLocker-protected drives. Microsoft has released emergency mitigations, but public exploits are already circulating.
A potent zero-day exploit is currently tearing through Microsoft Exchange servers, leaving businesses exposed. This isn't just an IT problem; it's a direct threat to your sensitive communications.
The dust has settled on Pwn2Own Berlin 2026, with white hat hackers walking away with a staggering $1.3 million. The competition showcased the relentless pursuit of zero-day vulnerabilities across a diverse tech landscape.
The Pwn2Own Berlin 2026 hacking contest saw a massive payout for security researchers, with nearly $1.3 million handed out for the discovery of 47 zero-day vulnerabilities. This year's event put a spotlight on enterprise technologies and the rapidly expanding AI landscape.
The digital gladiators of Pwn2Own Berlin 2026 descended once more, and this time, the venerable titans of enterprise software felt the sting. By the close of day two, not even fully patched systems for Microsoft Exchange and Windows 11 were safe from the relentless ingenuity of zero-day exploitation.
Microsoft is scrambling to address a high-severity zero-day flaw in Exchange Server, already being weaponized by attackers. The vulnerability enables arbitrary code execution, targeting users of Outlook on the web.
Cisco is sounding the alarm: a critical authentication bypass flaw in their Catalyst SD-WAN Controller has been exploited in the wild. Attackers are using this zero-day vulnerability to gain administrative access, a serious breach that demands immediate attention.
At Pwn2Own Berlin 2026, a brutal demonstration of security researcher prowess unfolded, with $523,000 awarded for exploiting 24 unique zero-days. The biggest scalp? Microsoft Edge.
Your data's supposed to be safe. It's not. Two critical Windows zero-day exploits are now public, leaving BitLocker-protected drives vulnerable.
A critical zero-day vulnerability in Palo Alto Networks' PAN-OS firewalls is seeing limited, targeted exploitation. The flaw allows unauthenticated attackers to gain root-level control.
U.S. federal agencies have just four days to patch a critical Ivanti vulnerability actively exploited in the wild. CISA's swift mandate underscores the escalating threat landscape for government networks.