Search: “Windows Update”

1,010 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 2568 Malware 1580 Ransomware 1163 Exploit / PoC 1012 Threat actor 285 Data breach 266 Industry 187 Policy & legal 142 Phishing & fraud 129 Advisory 60 Tools 50 AI tools & infra 42 AI safety & security 40 AI industry 32

SeverityAll critical 3502 high 2295 medium 1334 low 319 info 165

New Chrome 0-day Under Active Attacks

The Hacker NewsOct 21, 16:27 UTC · Oct 21, 2020Exploit / PoC in the wildCVE-2020-15999

Pawn Storm raced to pop many targets before Windows zero-day patch release

Help Net SecurityJun 26, 21:25 UTC · Jun 26, 2018Exploit / PoC in the wildCVE-2016-7855

PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258)

Help Net SecurityJun 29, 00:00 UTC · Jun 29, 2023Exploit / PoC CVE-2023-26258

Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware

The Hacker NewsNov 3, 17:57 UTC · Nov 3, 2025Exploit / PoC in the wildCVE-2025-27831

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks

The Hacker NewsApr 2, 19:20 UTC · Apr 2, 2026Exploit / PoC in the wildCVE-2026-3502

Low-level cybercriminals are pouncing on CrowdStrike

CyberScoopJul 23, 22:05 UTC · Jul 23, 2024Exploit / PoC in the wild

AI-Assisted Bug Hunt Uncovers Linux Kernel 0

Infosecurity MagazineJul 28, 14:45 UTC · Jul 28, 2026Exploit / PoC CVE-2026-53264 CVE-2026-64300

0patch releases unofficial patches for Windows 0days exploited in the wild

Security AffairsMar 27, 17:52 UTC · Mar 27, 2020Exploit / PoC in the wild

Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw

Help Net SecurityFeb 1, 00:00 UTC · Feb 1, 2026Exploit / PoC in the wildCVE-2026-21509 CVE-2026-24858 CVE-2025-8088+1 CVEs

It’s a hot 0-day summer for Apple, Google, and Microsoft security fixes

Ars Technica · SecurityAug 1, 17:55 UTC · Aug 1, 2023Exploit / PoC CVE-2023-37450 CVE-2023-36884 CVE-2023-32046+18 CVEs

Cortana Software Could Help Anyone Unlock Your Windows 10 Computer

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2018Exploit / PoC CVE-2018-8140

The Current Web

Kaspersky SecurelistAug 28, 23:09 UTC · Aug 28, 2012Exploit / PoC in the wildCVE-2012-4681

CloudLinux TuxCare services help improve security patching

Help Net SecurityFeb 6, 13:40 UTC · Feb 6, 2024Exploit / PoC

F5 asserts limited impact from prolonged nation

CyberScoopOct 28, 20:06 UTC · Oct 28, 2025Exploit / PoC in the wild

Google fixes critical Chrome flaw, researcher earns $43K

Security AffairsSep 11, 14:09 UTC · Sep 11, 2025Exploit / PoC in the wildCVE-2025-10200 CVE-2025-10201

A little-known npm package was North Korea’s warm

CyberScoopJul 29, 21:09 UTC · Jul 29, 2026Exploit / PoC in the wild

Google fixes yet another Chrome zero-day exploited in the wild (CVE-2024-5274)

Help Net SecurityMay 24, 00:00 UTC · May 24, 2024Exploit / PoC in the wildCVE-2024-5274

BlueHammer: Windows zero-day exploit leaked

Help Net SecurityJun 30, 11:31 UTC · Jun 30, 2026Exploit / PoC in the wildCVE-2026-33825

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers

The Hacker NewsJul 22, 03:59 UTC · Jul 22, 2025Exploit / PoC in the wildCVE-2025-53770 CVE-2025-49704 CVE-2025-49706+1 CVEs

Microsoft reveals actively exploited Office zero-day, provides emergency fix (CVE-2026-21509)

Help Net SecurityFeb 3, 18:36 UTC · Feb 3, 2026Exploit / PoC in the wildCVE-2026-21509

November 2019 Patch Tuesday: Actively exploited IE zero-day fixed

Help Net SecurityNov 13, 00:00 UTC · Nov 13, 2019Exploit / PoC in the wildCVE-2019-1429 CVE-2019-16863 CVE-2019-1373+1 CVEs

Leaked NSA Hacking Tools Being Used to Hack Thousands of Vulnerable Windows PCs

The Hacker NewsApr 22, 15:13 UTC · Apr 22, 2017Exploit / PoC in the wild

U.S. CISA adds Microsoft Windows, Zyxel device flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 12, 08:01 UTC · Feb 12, 2025Exploit / PoC in the wildCVE-2024-40891 CVE-2024-40890 CVE-2025-21418+1 CVEs

Google fixes 2 new actively exploited zero

Security AffairsDec 14, 07:57 UTC · Dec 14, 2021Exploit / PoC in the wildCVE-2021-38000 CVE-2021-38003 CVE-2021-21148+12 CVEs1

Commando VM — Turn Your Windows Computer Into A Hacking Machine

The Hacker NewsMar 29, 16:16 UTC · Mar 29, 2019Exploit / PoC

KeePass flaw allows retrieval of master password, PoC is public (CVE-2023-32784)

Help Net SecurityJun 5, 18:33 UTC · Jun 5, 2023Exploit / PoC CVE-2023-32784

Google fixes Chrome zero

Security AffairsFeb 25, 13:53 UTC · Feb 25, 2020Exploit / PoC in the wildCVE-2020-6418 CVE-2019-5786 CVE-2019-13720

Experts warn of mass exploitation of critical PHP flaw CVE-2024

Security AffairsMar 10, 14:52 UTC · Mar 10, 2025Exploit / PoC in the wildCVE-2024-4577 CVE-2012-1823

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

Researcher Chaotic Eclipse released ShieldBreak PoC, a claimed patch bypass for Microsoft Defender flaw CVE-2026-50656, now tracked as CVE-2026-69414.

Researcher Chaotic Eclipse released a PoC for ShieldBreak, a claimed full patch bypass of Microsoft Defender flaw CVE-2026-50656 (RoguePlanet), which can yield SYSTEM privileges. Independent researchers Kevin Beaumont and Will Dormann validated the exploit on Windows 11 25H2 and Windows Server 2025, noting it requires Defender to be enabled. Microsoft assigned CVE-2026-69414 (CVSS 7.8) with an 'Exploitation More Likely' assessment and is investigating, but has not yet released a patch. The article also notes CISA's KEV addition of the actively exploited Windows AFD.sys flaw CVE-2026-68820.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoC CVE-2026-50656 CVE-2026-62832 CVE-2026-68820+2 CVEs

Google patches actively exploited Chrome zero-day (CVE-2026-85046)

Google patches actively exploited Chrome zero-day CVE-2026-85046, a V8 type confusion bug enabling sandboxed code execution via crafted HTML pages.

Google patched 12 Chrome vulnerabilities, including CVE-2026-85046, a CVSS 8.8 type confusion flaw in the V8 JavaScript and WebAssembly engine exploited in the wild. The bug, reported by researcher Salvatore Gulizia (Serotav) on August 4, 2026, allows arbitrary code execution inside the sandbox via a crafted HTML page; the researcher described it as a V8 compiler bug enabling arbitrary read/write on the JavaScript heap. Fixes shipped in Chrome 152.0.7977.82/.83 for Windows and macOS and 152.0.7977.82 for Linux, and this is the sixth Chrome zero-day Google has fixed in 2026.

Help Net SecuritySep 8, 06:24 UTC · 8d agoExploit / PoC in the wildCVE-2026-85046 CVE-2026-2441 CVE-2026-3909+3 CVEs