Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#web-security — news, CVEs and analysis · ZeroHour

07:57 UTC· 6m ago

today 46 visits · 59 views · 7 reads·all time 17K views

Tag

#web-security

5 stories this week · 15 this month · 19 in 6 months · mostly security

stories per day · 30 days

Related#product-launch 4 #xss 4 #agentic-ai 3 #open-source 3 #pentesting 3 #reflectiz 3 #wordpress 3 #akamai 2 #apache-sling 2 #cache-poisoning 2 #csrf 2 #cve 2 #javascript 2 #patch 2 #rce 2 #ai-crawlers 1 #application-protection 1 #attack-surface-management 1

17 stories, newest first · one card per story

The Hacker News·1d ago high

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

#wordpress #cve-2026-87902 #php

16 sources 3 min1

Lobsters · security·1d ago

Cross-Site Scripting (XSS) Cheat Sheet

#xss #portswigger #web-security

15 min

oss-security·3d ago

CVE-2026-73192: Apache Sling XSS: XSS possible through XSSAPI.getValidHref()

#apache-sling #cve #open-source

CVE-2026-73192

GBHackers·5d ago

New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches

#cache-key-injection #cache-poisoning #cloudflare

2 sources 3 min

The Hacker News·8d ago high

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

#click2shell #csrf #patch

3 min2

SANS Internet Storm Center·9d ago

HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)

#cache-poisoning #csrf #http

Research

4 min

Help Net Security·9d ago

Most WordPress pros still lack a breach recovery plan

#backups #incident-response #melapress

2 min

Akamai Blog·9d ago

Unifying Client-Side Protection in Akamai Application Protection Platform

#akamai #application-protection #cdn

Tools

arXiv cs.CR·16d ago

You Get What You Sample: Evaluating Sampling Strategies for Web Security Measurements

#common-crawl #measurement-methodology #research-methods

Research

1

Cyber Security News·17d ago high

MapLibre Vulnerability Exposes 2.7M Users to Zero-Click Attacks

#cve-2026-85061 #ghsa-jrc7-96c5-q579 #javascript

3 min

CSO Online·18d ago

Reflectiz Launches Agentic Pentesting for Websites: Up to 10x Coverage vs Conventional Pentests

#agentic-ai #attack-surface-management #pentesting

3 min1

GBHackers·18d ago

Reflectiz Launches Agentic Pentesting for Websites: Up to 10x Coverage vs Conventional Pentests

#agentic-ai #owasp #pentesting

2 sources 3 min

Akamai Blog·24d ago

Introducing More Granular Controls for AI Bot Traffic

#ai-crawlers #akamai #bot-management

Tools

Patchstack·Aug 24, 2026

Case study: ManageWP Blocks 11.9M+ Threats in 6 Months with Patchstack

#case-study #managewp #patchstack

Akamai Blog·Aug 24, 2026

Deconstructing the Architecture of AI-Orchestrated Web Attacks

#agentic #ai-attacks #akamai

Research

Cloudflare Blog·Aug 21, 2026

Say it once: Introducing Bot Preference Sync

#ai-crawlers #bot-management #cloudflare

Sucuri Blog·Aug 19, 2026

What Is a Website Attack Surface? A Beginner’s Guide to Reducing Risk

#attack-surface #education #hardening