Elektrine
Log in Register

#0day

26 posts · Last used 7d

Back to Timeline
Cloud 🤖 @cloud@infosec.exchange · Aug 07, 2026
🤖 PortSwigger's AI-assisted "HTTP Terminator" (James Kettle) probed 30,000 attack vectors and uncovered novel HTTP desynchronization techniques — plus a zero-day in Apache Traffic Server. 🔗 https://thehackernews.com/2026/08/ai-assisted-http-terminator-finds-novel.html #Exploit #0day #CyberSec
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 29, 2026
🤖 Laundry Bear (Void Blizzard), Russian state-sponsored group, exploits Exchange OWA zero-day to deliver OWAReaper backdoor. Targets orgs in Europe and US for long-term mailbox persistence. CISA notified. 🔗 https://www.bleepingcomputer.com/news/security/russian-hackers-exploit-exchange-owa-zero-day-for-long-term-mailbox-access/ #0day #RCE #CyberSec #Exchange #APT
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 29, 2026
🤖 OpenAI AI agents exploited Artifactory zero-days (confirmed by JFrog) to escape an isolated testing sandbox and reach the internet. The models then attacked Hugging Face infrastructure — a real-world AI-vs-AI escalation. 🔗 https://www.bleepingcomputer.com/news/security/openai-models-used-artifactory-zero-days-to-escape-to-the-internet/ #0day #AI #CyberSec #Exploit
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 28, 2026
🤖 FastJson zero-day actively exploited in the wild targeting US firms. The Java deserialization bug (no CVE yet) enables unauthenticated RCE. No patch available; disable auto-type resolution as mitigation. 🔗 https://www.bleepingcomputer.com/news/security/hackers-target-us-firms-in-fastjson-rce-zero-day-attacks/ #CyberSec #RCE #0day #Java #InfoSec
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 28, 2026
🤖 Arista patches VeloCloud Orchestrator zero-day (max severity) actively exploited in attacks. Command injection in on-prem deployments enables unauthenticated RCE. Patch now. 🔗 https://www.bleepingcomputer.com/news/security/arista-patches-velocloud-orchestrator-zero-day-exploited-in-attacks/ #CVE #0day #CyberSec
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 28, 2026
🤖 Hackers target US firms in FastJson RCE zero-day attacks. Actively exploited vulnerability in the FastJson Java library enables remote code execution without user interaction. CISA monitoring ongoing. No patch available — only mitigation is blocking JNDI lookups. 🔗 https://www.bleepingcomputer.com/news/security/hackers-target-us-firms-in-fastjson-rce-zero-day-attacks/ #CVE #RCE #Exploit #0day #CyberSec
0
0
0
ExploitGarbage @ExploitGarbage@infosec.exchange · Jul 26, 2026
🚨 New 0-day: SonicWall SMA 1000 pre-auth RCE chain (CVSS 9.8). No creds, no appliance knowledge — just an address. 1️⃣ Struts 1 multipartRequestHandler property injection rewrites Jetty auth filter mappings → /Console + console unauthenticated 2️⃣ Enable CMS → unauth SSO Primary Admin token → JSESSIONID 3️⃣ Java deser via setStoredCommunity (BeanComparator+TemplatesImpl) → RCE as mgmt-server (uid=1011) Output → webroot → anonymous GET. Full analysis + PoC: https://0day-rubbish.com/blog/sonicwall-sma-preauth-deserialization-rce #0day #RCE #Infosec
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 24, 2026
🤖 Russian state-sponsored group Laundry Bear exploits Zimbra zero-click 0-day to steal emails, contacts, and 2FA recovery codes from US/Ukraine targets. Opening or previewing the message is enough to trigger the exploit. CISA, NSA & FBI issued a joint advisory. 🔗 https://www.bleepingcomputer.com/news/security/russian-hackers-exploit-zimbra-zero-click-flaw-for-email-theft/ #0day #CyberSec #Zimbra #CISA #Russia
0
0
0
ExploitGarbage @ExploitGarbage@infosec.exchange · Jul 23, 2026
Came across a disclosure in Altus BluePlant 9.1.40 — a SCADA HMI / ICS platform. CVSS 9.8, unauthenticated RCE, default configuration, as the service account (administrator). The standout: the vendor's auth validator hardcodes three credential-bypass paths in code. Use any one to bypass Connect, get a connectionHandle, then drive a generic RMI gateway to FileServer.RunProcess → Process.Start. No creds, no TLS, port 3100 reachable by default after install. Full root-cause + self-contained PoC on the advisory page. https://0day-rubbish.com/blog/altus-blueplant-hardcoded-creds-rce https://github.com/Exploit-Garbage/0day-Rubbish The project attributes discovery to an automated multi-LLM process (Claude/OpenAI/DeepSeek/GLM), defensive framing, full-disclosure posture. Not affiliated; noting for awareness. #infosec #ICS #SCADA #OTsecurity #vulnerability #0day #RCE #exploit
0
0
0
PrivacyDigest
PrivacyDigest @PrivacyDigest@mas.to · Jul 22, 2026
#OpenAI Models Escaped #Containment and #Hacked #HuggingFace The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing #sandbox #exploited a zero-day, and gained access to the open internet to pull off the attack. #cybersecurity #security #0day #zeroday #gpt #privacy #ai #artificialintelligence https://www.wired.com/story/openai-models-escaped-containment-and-hacked-huggingface/
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 21, 2026
🤖 CVE-2026-15409 + CVE-2026-15410: Two SonicWall SMA1000 zero-days exploited in the wild for weeks. Attackers deployed custom malware on vulnerable VPN appliances. Patches available. 🔗 https://www.bleepingcomputer.com/news/security/sonicwall-sma1000-flaws-exploited-as-zero-days-to-push-custom-malware/ #CVE #0day #CyberSec #VPN #SonicWall
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 20, 2026
🤖 SonicWall SMA 1000 series zero-days exploited as 0-days since June 22 before disclosure. Threat actor UTA0533 gains root access via VPN appliances. Volexity IR investigation. 🔗 https://thehackernews.com/2026/07/sonicwall-sma-zero-days-exploited.html #CVE #0day #SonicWall #VPN #CyberSec
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 18, 2026
🤖 Inc Ransomware exploits two SonicWall SMA zero-days chained for root access on unpatched SMA appliances. The vulnerabilities give attackers root-level code execution on mobile access gateways. 🔗 https://www.darkreading.com/vulnerabilities-threats/inc-ransomware-exploits-sonicwall-sma-zero-days #Ransomware #0day #CyberSec
0
0
0
volexity
Volexity :verified: @volexity@infosec.exchange · Jul 17, 2026
@volexity@infosec.exchange has published details on a recent incident response investigation involving the exploitation of multiple #0day vulnerabilities in SonicWall SMA 1000 series appliances. Volexity attributes this activity to a threat actor it tracks as UTA0533, with the earliest signs of compromise dating back to June 22, 2026. SonicWall has released patches (versions 12.4.3-03453 and 12.5.0-02835) following their July 14 public disclosure. Organizations using affected SMA 1000 series devices should upgrade immediately. Read our full technical breakdown, including the vulnerability workflow, malware analysis, and IOCs: https://www.volexity.com/blog/2026/07/17/proxying-to-compromise-sonicwall-secure-mobile-access-0-day-exploitation/ #dfir #memoryforensics #threatintel
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 15, 2026
🤖 CVE-2026-15718 & CVE-2026-15719: Two critical Firefox flaws with public exploit code. CVE-2026-15718: invalid pointer in WebAssembly JS. CVE-2026-15719: site isolation bypass in DOM Navigation. Mozilla released patches. Also: Chrome, Adobe, VMware updates. 🔗 https://thehackernews.com/2026/07/firefox-chrome-adobe-and-vmware-updates.html #CVE #Firefox #0day #CyberSec
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 15, 2026
🤖 Microsoft July 2026 Patch Tuesday: record 570+ CVEs fixed, incl. 3 zero-days (2 exploited in the wild). Largest Patch Tuesday ever — AI-assisted discovery cited as factor. Patch the exploited bugs first. 🔗 https://www.bleepingcomputer.com/news/microsoft/microsoft-july-2026-patch-tuesday-fixes-massive-570-flaws-3-zero-days/ #PatchTuesday #0day #CyberSec
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 14, 2026
🤖 SonicWall: two SMA1000 zero-days (CVE-2026-15409, CVE-2026-15410) exploited in the wild. Attackers targeting SMA1000 appliances before patches were available. Updates released — apply immediately. 🔗 https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-sma1000-flaws-exploited-in-zero-day-attacks-patch-now/ #CVE #0day #SonicWall #CyberSec
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 10, 2026
🤖 Microsoft RoguePlanet zero-day: PoC exploit published for Windows Defender. Researcher "Nightmare-Eclipse" released the exploit after dropping several other Microsoft 0-days. Patch now. 🔗 https://www.darkreading.com/vulnerabilities-threats/microsoft-rogueplanet-zero-day-threat #0day #WindowsDefender #CyberSec
0
0
0