#Zero-Day
Arista VeloCloud Orchestrator Zero-Day: Patch the SD-WAN Control Plane Now
Arista VeloCloud Orchestrator Zero-Day: Patch the SD-WAN Control Plane Now Arista has confirmed active exploitation of CVE-2026-114625, a critical [SQL injectio...
Lucas Oliveira
Research
Microsoft Fixes Exploited Windows Shell Zero-Day Behind Mark-of-the-Web Bypass
Microsoft Fixes Exploited Windows Shell Zero-Day Behind Mark-of-the-Web Bypass Executive Summary Microsoft's October 2026 Patch Tuesday landed with an unusually...
Lucas Oliveira
Research
CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited
CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited | 2026 Executive Summary Citrix has released emergency updates for CVE-2026-88779, a newly assigned Net...
Lucas Oliveira
Research
CVE-2026-102489: Zammad Zero-Day Chain Hits Root
CVE-2026-102489: Zammad Zero-Day Chain Hits Root | 2026 Executive Summary Since September 21, 2026, the chained CVE-2026-102489 and CVE-2026-102490 vulnerabilit...
Lucas Oliveira
Research
Apple CoreGraphics zero-day puts older iOS and macOS devices on the urgent patch path
Apple CoreGraphics zero-day puts older iOS and macOS devices on the urgent patch path Apple's September 28 security updates deserve fast attention from security...
Lucas Oliveira
Research
CVE-2026-76460: Cisco ISE Auth Bypass Zero-Day
CVE-2026-76460: Cisco ISE Auth Bypass Zero-Day | 2026 Executive Summary Since September 16, 2026, the critical CVE-2026-76460 vulnerability in Cisco Identity Se...
Lucas Oliveira
Research
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius Arista's July 27 advisory on CVE-2026-16812 deserves immediate attention because the aff...
Lucas Oliveira
Research
Exploited SonicWall SMA zero-days put remote access gateways on the clock
Exploited SonicWall SMA zero-days put remote access gateways on the clock SonicWall has released urgent fixes for two exploited zero-day vulnerabilities in its...
Lucas Oliveira
Research
YellowKey fix lands in June baseline: patch BitLocker fleets now
YellowKey fix lands in June baseline: patch BitLocker fleets now Microsoft has now closed the patch gap for CVE-2026-45585, the public BitLocker bypass widely r...
Lucas Oliveira
Research
Exchange CVE-2026-42897 patches land after active OWA exploitation
Exchange CVE-2026-42897 patches land after active OWA exploitation Microsoft has now shipped the June 2026 Exchange security updates for CVE-2026-42897, ending...
Lucas Oliveira
Research
Chrome Zero-Day CVE-2026-11645 Enters KEV After Google Ships Emergency V8 Patch
Chrome Zero-Day CVE-2026-11645 Enters KEV After Google Ships Emergency V8 Patch Google has patched an actively exploited [zero-day](https://invaders.ie/resource...
Lucas Oliveira
Research
Cisco SD-WAN zero-day turns earlier auth bypass flaws into root access risk
Cisco SD-WAN zero-day turns earlier auth bypass flaws into root access risk Cisco's new CVE-2026-20245 advisory matters because it is not just another isolated...
Lucas Oliveira
Research