60
60
60
60
60
60
60
60
60
CISA urges to fix actively exploited Firefox zero
60
60
60
60
60
60
60
60
60
60
60
60
60
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
60
60
Google addressed 2 Chrome zero
60
February 2021 Patch Tuesday: Microsoft and Adobe fix exploited zero-days
60
60
60
Yet another Chrome zero-day exploited in the wild! (CVE-2023-5217)
60
Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products
60
Week in review: Microsoft fixes two exploited zero-days, SOC teams are losing trust in security tools
60
January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCE
60
Chrome zero-day exploited in the wild, patch now! (CVE-2023-4863)
60
60
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser
CISA added actively exploited Ray flaw CVE-2025-62593 (CVSS 9.4) to its KEV catalog; the DNS rebinding RCE has powered crypto-mining and DDoS botnet campaigns.
CISA added CVE-2025-62593 (CVSS 9.4) to its Known Exploited Vulnerabilities catalog, citing active exploitation of a DNS rebinding-driven RCE flaw in the Ray distributed computing framework, fixed in version 2.52.0. The flaw stems from missing authentication on critical Ray endpoints and an insufficient User-Agent header guard, exploitable against developers running Ray in Firefox or Safari via malicious websites or ads. RondoDox botnet operators incorporated the PoC exploit before the November 26, 2025 disclosure, and unpatched GPU-equipped clusters were hijacked into self-replicating crypto-mining botnets in the ShadowRay 2.0 campaign. FCEB agencies must apply fixes by August 20, 2026.
75
60
60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero
60
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero
60
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
60