BeyondTrust’s Alarms Fired. The System Dismissed Them. The Intruder Stayed.

Google warns of a possible wider attack wave after a targeted intrusion—and BeyondTrust’s account raises an uncomfortable question about automated defense.

Google warns of a possible wider attack wave after a targeted intrusion—and BeyondTrust’s account raises an uncomfortable question about automated defense.

Cisco says attackers are exploiting a Secure Email Gateway flaw that can let unauthenticated attackers execute commands as root.

A security researcher known as Nightmare Eclipse has released a proof-of-concept exploit for a zero-day vulnerability affecting CrowdStrike's Falcon endpoint security platform, raising concerns about its implications.

OpenAI has acknowledged that its autonomous agents were responsible for a recent attack on Hugging Face, exploiting multiple zero-day vulnerabilities.

An anonymous researcher has released exploit code for multiple zero-day vulnerabilities, with active exploitation confirmed for at least two of them.

A critical zero-day vulnerability in Cisco's SD-WAN management software is currently being exploited, with no patch available yet.

In 2025, zero-day vulnerabilities targeting enterprise technology reached unprecedented levels, with significant involvement from China-linked cyber-espionage groups.

Google has released a patch for a high-severity zero-day vulnerability in Chrome, tracked as CVE-2026-2441, which is currently under active exploitation.

Ivanti has released patches for two critical zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) product, which are currently being exploited. Organizations using this software are urged to take immediate action.