The Hacker News2d
PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks
PostgreSQL SQL injection flaw (CVE-2025-1094) exploited alongside BeyondTrust zero-day, enabling arbitrary code execution.
Apple fixes zero-day exploited in 'extremely sophisticated' attacks
Apple has released emergency security updates to patch a zero-day vulnerability that the company says was exploited in ...
Robert De Niro and Eric Newman on thriller Zero Day: ‘It’s anxiety-provoking — but that’s OK’
The actor and the showrunner discuss their new Netflix series — and how it gives America the kind of president it needs ...
7-Zip MotW bypass exploited in zero-day attacks against Ukraine
A 7-Zip vulnerability allowing attackers to bypass the Mark of the Web (MotW) Windows security feature was exploited by ...
VeraCore zero-day vulnerabilities exploited in supply chain attacks
Researchers discovered two active exploits of zero-day vulnerabilities in warehouse management software platform VeraCore.
SecurityWeek2d
Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation
Rapid7 finds a new zero-day vulnerability in PostgreSQL and links it to chain of attacks against a BeyondTrust Remote Support ...
Patch Tuesday: Microsoft Patches Two Actively Exploited Zero-Day Flaws
CVE-2025-21391, the zero-day Windows storage flaw, stems from the way Windows resolves file paths and follows links, Walters ...
Techopedia2d
Windows Zero-Day Vulnerability Allows Attackers to Gain System Access Remotely
The New Windows zero-day CVE-2025-21418 is being actively exploited. Learn how attackers can gain system access and what ...
The Register on MSN1d
Critical PostgreSQL bug tied to zero-day attack on US Treasury
High-complexity bug unearthed by infoseccers, as Rapid7 probes exploit further A high-severity SQL injection bug in the ...
Business Wire12d
Contrast Security Releases Modern Heist Bank Report 2025, Revealing Critical Concern Over Zero-Day Attacks
“Our research found that the financial sector is facing increasing threats with a noticeable uptick in zero-day and destructive attacks,” said Tom Kellermann, Cybersecurity Advisor for ...
CSOonline2d
PostgreSQL patches SQLi vulnerability likely exploited in BeyondTrust attacks
Rapid7 researchers believe the BeyondTrust Remote Support attacks from December also exploited a zero-day flaw in PostgreSQL.
The Hacker News5d
XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells
XE Group exploits a VeraCore zero-day (CVE-2024-57968) to deploy web shells, enabling persistent access and targeting supply ...