Search: “quic”

6 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 15 Vulnerability 12 Ransomware 7 Threat actor 6 Exploit / PoC 6 Industry 3 AI tools & infra 2 Data breach 2 Policy & legal 2 Research 2 Tools 2 Advisory 1 AI safety & security 1

SeverityAll critical 24 high 19 medium 10 low 6 info 2

Microsoft Patches 398 Flaws Including a Windows Driver Zero

Microsoft's August Patch Tuesday fixes 398 CVEs, including actively exploited Windows zero-day CVE-2026-68820 used by Lazarus for SYSTEM privilege escalation.

Microsoft's August 2026 Patch Tuesday release addresses 398 new vulnerabilities, 62 rated Critical by the Zero Day Initiative, with CVE-2026-68820 (CVSS 7.0), a use-after-free in the afd.sys Windows kernel driver, the only flaw flagged as actively exploited. Check Point Research attributed exploitation of the privilege escalation bug to Lazarus' Operation Dream Job campaign. Four unauthenticated remote code execution flaws rated 9.8 affect Windows DNS Server (CVE-2026-62878, called wormable by ZDI), Windows Deployment Services (CVE-2026-62893), Microsoft QUIC (CVE-2026-62815) and HPC Pack (CVE-2026-59124). The release also completes a two-part SharePoint fix with RCE component CVE-2026-63520, following July's authentication bypass fix CVE-2026-55040.

The Hacker NewsAug 11, 20:10 UTC · Aug 11, 2026Exploit / PoC in the wildCVE-2026-68820 CVE-2026-62878 CVE-2026-62893+4 CVEs

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11

The Hacker NewsJul 24, 05:12 UTC · Jul 24, 2026Exploit / PoC CVE-2025-66199 CVE-2026-34183

U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog

Security AffairsAug 27, 18:20 UTC · Aug 27, 2025Exploit / PoC in the wildCVE-2025-7775 CVE-2025-7776 CVE-2025-8424

Citrix fixed three NetScaler flaws, one of them actively exploited in the wild

Security AffairsAug 26, 19:24 UTC · Aug 26, 2025Exploit / PoC in the wildCVE-2025-7775 CVE-2025-7776 CVE-2025-8424

Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820)

Microsoft's August 2026 Patch Tuesday fixes 400+ vulnerabilities, including an actively exploited Windows zero-day (CVE-2026-68820) used by North Korean attackers.

Microsoft's August 2026 Patch Tuesday fixes over 400 vulnerabilities, including CVE-2026-68820, a use-after-free in the Windows Ancillary Function Driver exploited in the wild by North Korean actors deploying a kernel-mode rootkit in Operation Dream Job. Critical unauthenticated remote code execution flaws in Microsoft QUIC (CVE-2026-62815) and Windows DNS (CVE-2026-62878) were also patched, alongside a SharePoint RCE chain combining CVE-2026-63520 with CVE-2026-55040. Researcher Nightmare-Eclipse released ShieldBreak, a PoC bypassing the July RoguePlanet Microsoft Defender patch (CVE-2026-50656), confirmed working by Will Dormann on Windows 11.

Help Net SecurityAug 12, 00:00 UTC · Aug 12, 2026Exploit / PoC in the wildCVE-2026-68820 CVE-2026-62832 CVE-2026-72971+6 CVEs

Corelight enhances Open NDR to detect AI-driven threats and unknown assets

Help Net SecurityJun 17, 00:00 UTC · Jun 17, 2026Exploit / PoC in the wild