Metabase Zero-Day Exposes Framework, Tally Customer Data
Two companies told customers this week that their personal data had been stolen. Neither was breached…
Category
ZeroDay Bug
Cursor’s Unpatched 0-Day Lets a Fake Git Binary Hijack Your Windows PC
A security flaw in Cursor, the AI-powered code editor used by more than 7 million developers,…
BitLocker Bypass GreatXML: Using Defender Offline Scan Against You
Security researcher Chaotic Eclipse, the same anonymous figure behind the RoguePlanet Defender zero-day dropped just 24…
Microsoft Defender Zero-Day PoC Gives SYSTEM Access on Fully Patched Windows
A researcher who has turned Microsoft’s vulnerability disclosure process into a public battleground has released another…
Researcher Drops PoC for 1-Click GitHub Token Theft via VSCode Bug — Skips MSRC Entirely
Security researcher Ammar Askar has publicly released a fully working proof-of-concept (PoC) exploit that can steal…
Trend Micro’s Own Security Tool Turned Against Enterprises — Apex One Zero-Day Actively Exploited
The endpoint security software meant to protect enterprise networks from attackers has itself become a target.…
Palo Alto PAN-OS Zero-Day Under Active Attack — No Patch Available Yet
Attackers are already exploiting a critical zero-day vulnerability in Palo Alto Networks’ PAN-OS, the operating system…
Telegram 0-Day: One Sticker Could Hack You — Telegram Calls It Fake
[Updated: March 30, 2026 — Score revised from 9.8 to 7.0. Original story below.] On Sunday,…
Apple Rushes Patch for Actively Exploited Zero-Day Linked to Spyware Attacks
Apple has issued emergency security updates to address a critical zero-day vulnerability actively exploited in what…