Search: “Zero Day Clock”

12 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 51 Vulnerability 32 Ransomware 32 Malware 18 Data breach 13 Policy & legal 9 Industry 6 Threat actor 5 Research 4 Phishing & fraud 4 AI research 2 AI industry 2 AI safety & security 1 Model release 1

SeverityAll critical 129 high 22 medium 12 low 4 info 13

ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

Researcher Chaotic Eclipse published a PoC bypassing Microsoft's CVE-2026-50656 Defender patch, enabling SYSTEM-level code execution on fully patched Windows systems.

Security researcher Chaotic Eclipse released a proof-of-concept for ShieldBreak, a Microsoft Defender zero-day that fully bypasses the patch for CVE-2026-50656 (RoguePlanet), a race condition in the Malware Protection Engine (mpengine.dll) allowing SYSTEM-level code execution. The PoC was tested on Windows 11 25H2 and Windows Server 2025 with a 100% success rate, and Windows 10 is also vulnerable though not supported by the PoC; the flaw may also leak 8 bytes of memory. Microsoft's MSRC had criticized the researcher's repeated uncoordinated disclosures, including YellowKey (BitLocker bypass), GreenPlasma, and LegacyHive (User Profile Service LPE).

Security AffairsAug 12, 08:08 UTC · Aug 12, 2026Exploit / PoC CVE-2026-50656

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak

The Hacker NewsJul 1, 06:46 UTC · Jul 1, 2026AI safety & security1

Side-Channel Attack against Electronic Locks

Schneier on SecurityAug 15, 00:00 UTC · Aug 15, 2019Vulnerability

Oregon Man Charged in ‘Rapper Bot’ DDoS Service

Krebs on SecurityAug 19, 21:30 UTC · Aug 19, 2025Policy & legal

Fake CVE-2023

A fake PoC for WinRAR RCE CVE-2023-40477 posted on GitHub actually deploys VenomRAT through a multi-step infection chain targeting researchers.

Four days after Zero Day Initiative publicly disclosed the WinRAR RCE vulnerability CVE-2023-40477 on August 17, 2023, an actor using the alias whalersplonk published a fake proof-of-concept on GitHub. The Python script actually repurposed public PoC code for GeoServer SQL injection CVE-2023-25157 and triggered an infection chain ending in VenomRAT. The README and an accompanying video lured users into running the script; the video drew over 100 plays. Unit 42 assesses the actor was opportunistic, targeting other miscreants adopting new vulnerabilities rather than researchers specifically.