Mur d'images - Cyberveille

curated by Decio

Apple alerts exploit developer that his iPhone was targeted with government spyware | TechCrunch

Apple fixes zero-day vulnerability exploited in "extremely sophisticated attack" (CVE-2025-43300)

Chrome 0-Day Flaw Exploited in the Wild to Execute Arbitrary Code

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation

Telegram zero-day allowed sending malicious Android APKs as videos

'ArcaneDoor' Cyberspies Hacked Cisco Firewalls to Access Government Networks

CVE-2023-46805

Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN

Chinese Hackers Exploited New Zero-Day in Barracuda's ESG Appliances

Xfinity waited to patch critical Citrix Bleed 0-day. Now it’s paying the price

Thousands of routers and cameras vulnerable to new 0-day attacks by hostile botnet | Ars Technica

Zimbra 0-day used to target international government organizations

SysAid Zero-Day Vulnerability Exploited by Ransomware Group

Hackers exploit critical flaw in WordPress Royal Elementor plugin

CVE: Zero-Day Privilege Escalation in Confluence Server & Data Center

New Apple Zero-Days Exploited to Target Egyptian ex-MP with Predator Spyware

Apple emergency updates fix 3 new zero-days exploited in attacks

North Korea-backed hackers target security researchers with 0-day

Diving Deep into UNC4841 Operations Following Barracuda ESG Zero-Day Remediation (CVE-2023-2868)

WinRAR 0-day that uses poisoned JPG and TXT files under exploit since April | Ars Technica

Ivanti warns of new actively exploited MobileIron zero-day bug

Trustwave Action Response: Zero Day Exploitation of MOVEit (CVE-2023-34362)

Zero-Day Vulnerability in MOVEit Transfer Exploited for Data Theft

Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) - Help Net Security

Google Chrome emergency update fixes first zero-day of 2023

Android app from China executed 0-day exploit on millions of devices | Ars Technica

Everything We Know About CVE-2023-23397

Microsoft’s March 2023 Patch Tuesday Addresses 76 CVEs (CVE-2023-23397)

Rogue CyberSecurity Company Employee Tried To Sell Powerful, Stolen iPhone Malware For $50-Million

https://infosec.exchange/@briankrebs/109795710941843934?s=09

Why would you want to hack Electric Vehicle Charging Stations?

Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend

Bad VIB(E)s Part One: Investigating Novel Malware Persistence Within ESXi Hypervisors | Mandiant

Warning: New attack campaign utilized a new 0-day RCE vulnerability on Microsoft Exchange Server

PSA: Nearly 5 Million Attacks Blocked Targeting 0-Day in BackupBuddy Plugin

Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits

Microsoft Diagnostic Tool "DogWalk" Package Path Traversal Gets Free Micropatches (0day/WontFix)

Protecting Android users from 0-Day attacks

The More You Know, The More You Know You Don’t Know

Chrome Zero-Day Under Active Attack: Patch ASAP | Threatpost

New DeadBolt ransomware targets QNAP devices, asks 50 BTC for master key

Operation EmailThief: Active Exploitation of Zero-day XSS Vulnerability in Zimbra

A walk through Project Zero metrics