Researcher Drops PoC for 1-Click GitHub Token Theft via VSCode Bug — Skips MSRC Entirely
Security researcher Ammar Askar has publicly released a fully working proof-of-concept (PoC) exploit that can steal…
Category
ZeroDay Bug
Trend Micro’s Own Security Tool Turned Against Enterprises — Apex One Zero-Day Actively Exploited
The endpoint security software meant to protect enterprise networks from attackers has itself become a target.…
Palo Alto PAN-OS Zero-Day Under Active Attack — No Patch Available Yet
Attackers are already exploiting a critical zero-day vulnerability in Palo Alto Networks’ PAN-OS, the operating system…
Telegram 0-Day: One Sticker Could Hack You — Telegram Calls It Fake
[Updated: March 30, 2026 — Score revised from 9.8 to 7.0. Original story below.] On Sunday,…
Apple Rushes Patch for Actively Exploited Zero-Day Linked to Spyware Attacks
Apple has issued emergency security updates to address a critical zero-day vulnerability actively exploited in what…
Hackers Are Actively Exploiting Critical Microsoft Office Flaw—Patch Now or Risk Takeover
Microsoft has scrambled to release an out-of-band security patch for a high-severity zero-day vulnerability in Office…
Cloudflare’s Certificate Path Let Attackers Sidestep Web Application Firewalls for Months
A seemingly innocuous certificate validation path became a hidden gateway past Cloudflare’s Web Application Firewall (WAF),…
New VMware Zero-Day Exploited Chinese Hackers
A critical privilege escalation vulnerability in VMware products was exploited in the wild for nearly a…
Hackers Exploit Cisco Firewall Zero-Days, CISA Issues Emergency Directive
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive, ordering federal agencies to…