NEAR AI: SGLang flaw, 18 agents, about 100 users
ZeroDay Times Desk4 min read
Archive
Search briefings
Titles, decks, desks, and tags. The filter runs in your browser against this page.
83 briefings in the index.
Railway: $740,000 in AI charges, 100,000 workspaces
ZeroDay Times Desk4 min read
Windows 10 KB5131096: 1,235 Patch Tuesday flaws, ESU only
ZeroDay Times Desk3 min read
Binance: iOS 26 and 27 can leak wallet seeds
ZeroDay Times Desk2 min read
Claude Fable 5.2: 76.3% on CyScenarioBench
ZeroDay Times Desk2 min read
OpenSSH, GPUStack, FreeSWITCH, IBM: patch by November 12
ZeroDay Times Desk4 min read
Qubole: trusted AWS account stole customer secrets
ZeroDay Times Desk4 min read
Shahid Kaveh: 700 French stores and 15 fires
ZeroDay Times Desk3 min read
Vanderbilt BYOD: 1 million SSNs claimed
ZeroDay Times Desk3 min read
Xen Orchestra: VSA-2026-062 takes XCP-ng as root
ZeroDay Times Desk2 min read
Microsoft Paint CVE-2026-83844: the fix skips Windows Update
ZeroDay Times Desk3 min read
OpenSSH CVE-2026-123158: root on a honeypot in nine hours
ZeroDay Times Desk2 min read
Claude Dispatch: browser extensions run desktop code
ZeroDay Times Desk3 min read
Iris Ohyama: 7.7 million shoppers exposed
ZeroDay Times Desk3 min read
QNAP NAS: Plex2Shell, four CVEs, assume compromise
ZeroDay Times Desk2 min read
Veeam Appliance: kernel panic on AMD EPYC
ZeroDay Times Desk3 min read
WordPress CVE-2026-119977: the 7.1.4 install is one last window
ZeroDay Times Desk4 min read
Chainalysis: credentials for every customer
ZeroDay Times Desk2 min read
Claude Code: 1,122 copies leak keys
ZeroDay Times Desk4 min read
Crédit Mutuel Arkéa: $133 million via a provider
ZeroDay Times Desk3 min read
GitHub: fake Fscan helper, 2,000 Windows hosts
ZeroDay Times Desk2 min read
GPT-6 Cyber: 81 Firefox flaws, 948 Linux bugs
ZeroDay Times Desk2 min read
GPT-6 Cyber: stayed in bounds 99.93%
ZeroDay Times Desk3 min read
SonicWall: CVE-2026-19868 skips SAML MFA
ZeroDay Times Desk2 min read
WorkOS: ARTEX escaped the sandbox
ZeroDay Times Desk3 min read
Chainalysis: all users' live tokens, Reactor down
ZeroDay Times Desk3 min read
ChatGPT Lockdown Mode: zero-click chat theft
ZeroDay Times Desk3 min read
D-Link DGS-3130: unpatched, disable DDP
ZeroDay Times Desk3 min read
GPT-6 Astra: about 40% fewer safety checks, no warning
ZeroDay Times Desk3 min read
OpenAI and SpaceX: fake events steal Microsoft and Google sessions
ZeroDay Times Desk3 min read
Truffle Security: 1.4 million exposed secrets still work
ZeroDay Times Desk3 min read
Apple CVE-2024-27834: CISA's deadline is November 18
ZeroDay Times Desk2 min read
Backdoored ARTEX: root on 62 consoles
ZeroDay Times Desk4 min read
DigiCert: passports and licenses left online
ZeroDay Times Desk3 min read
EFS: three blood stores pushed hot, none lost
ZeroDay Times Desk4 min read
OpenAI: 948 Linux paths to root for $1.2 million
ZeroDay Times Desk2 min read
OpenAI Codex: Haiou prompt adware, 403 stars
ZeroDay Times Desk3 min read
OpenSSH '*sshole': locked accounts still log in
ZeroDay Times Desk2 min read
Vercel: stolen session cookies fail off-device
ZeroDay Times Desk2 min read
Zyxel GS1900: CVE-2026-107441, 996 switches
ZeroDay Times Desk3 min read
Chainstack: password hashes exposed, rotate the node keys
ZeroDay Times Desk2 min read
cPGuard: a hijacked update reached 2,946 servers
ZeroDay Times Desk3 min read
Google: Jet Night passed nearly $1 million in stolen model calls
ZeroDay Times Desk3 min read
CISA sets a Friday deadline for WordPress CVE-2026-119977
ZeroDay Times Desk2 min read
WorkOS: ARTEX AI read the sales CRM
ZeroDay Times Desk3 min read
Abrigo's Sageworks: borrower portal still down
ZeroDay Times Desk3 min read
ARTEX AI targeted 200 organizations across 14 countries
ZeroDay Times Desk3 min read
Barracuda CVE-2026-116606 chains to root on the email gateway
ZeroDay Times Desk3 min read
Binance: fake job interviews opened the $6.43 billion theft
ZeroDay Times Desk4 min read
CryptoPayment Gateway CVE-2026-81648 leaks wallet keys with no patch
ZeroDay Times Desk2 min read
Google: LLMjacking cloud bills have hit $1 million
ZeroDay Times Desk4 min read
Langflow CVE-2026-93680 scores 9.8 before version 1.13.0
ZeroDay Times Desk3 min read
Siemens IoT2050 CVE-2026-58115 plants remote command backdoors
ZeroDay Times Desk2 min read
Chainalysis says names and roles leaked and case files did not
ZeroDay Times Desk2 min read
CVE-2026-97229: Alpine rebuilt GitLab and reset every password
ZeroDay Times Desk3 min read
OpenAI doubles Pro limits and tests Work tools inside Chat
ZeroDay Times Desk3 min read
Polymarket refunds $2.7 million after a hijacked DebugBear script
ZeroDay Times Desk3 min read
Android 'SMS of Death' can crash unpatched phones without a tap
ZeroDay Times Desk3 min read
Chainalysis says agentic attackers reached customer identity data
ZeroDay Times Desk3 min read
An unreleased Claude model reached root on Linux CVE-2026-98432 in 53 minutes
ZeroDay Times Desk3 min read
Tampered Claude Code reached 5,000 Cursor users in two builds
ZeroDay Times Desk3 min read
CVE-2026-112816: LXD and MicroCloud score CVSS 10.0
ZeroDay Times Desk2 min read
Northflank breach: rotate every secret stored as an environment variable
ZeroDay Times Desk3 min read
Brotli's decoder bug is on KEV: patch every stack that ships the library
ZeroDay Times Desk2 min read
A shared ChatGPT link could act as the person who opened it
ZeroDay Times Desk3 min read
CISA puts Cisco SSL VPN DoS on the exploited list with a November 1 clock
ZeroDay Times Desk3 min read
Network DDoS rose 38% as short floods replaced the terabit attacks
ZeroDay Times Desk3 min read
Drupal says Commerce Core access bypass is already hitting live shops
ZeroDay Times Desk2 min read
CISA puts GitLab's max-severity CI regex flaw on the exploited list
ZeroDay Times Desk2 min read
CISA sets a November 2 deadline on exploited Ivanti Connect Secure bug
ZeroDay Times Desk3 min read
Magento's PolyShell upload bug is on KEV and still landing files on disk
ZeroDay Times Desk3 min read
WordPress upgrade race is already drawing tens of thousands of probes
ZeroDay Times Desk2 min read
Binance's signing desk lost $6.3 billion in twenty minutes
ZeroDay Times Desk5 min read
A trojanized Claude Code extension on Cursor tried to leave an SSH backdoor
ZeroDay Times Desk2 min read
TeamViewer fixed a flaw that lets the host hit the operator who connected
ZeroDay Times Desk3 min read
A suspected implant in a Trezor Safe 5 turns the seed into a radio leak
ZeroDay Times Desk3 min read
Unlisted Chrome extensions hijacked search on a reported 13.4 million installs
ZeroDay Times Desk3 min read
CVE-2026-98432 is patched upstream and still missing from Ubuntu and Red Hat
ZeroDay Times Desk5 min read
Fake ChatGPT and Claude apps on GitHub are a miner behind a signed file
ZeroDay Times Desk3 min read
Stolen credentials, not a product flaw, still open the widest breach window
ZeroDay Times Desk5 min read
A six-figure bounty is a procurement decision, not a gift
ZeroDay Times Desk5 min read
Exposed SSH is still a patching problem with a name: CVE-2024-6387
ZeroDay Times Desk4 min read
Your copilot reads mail the attacker can write
ZeroDay Times Desk5 min read