Pins matching tag:Zero-Day

Qualcomm's June 2025 security bulletin fixed three flaws in its Adreno GPU driver that Google's Threat Analysis Group said may be under limited, targeted exploitation; CISA ordered US agencies to patch by 24 June.

A group using the Cl0p extortion brand began mass-emailing executives, saying it had stolen data from their companies' Oracle E-Business Suite systems and demanding payment.

Oracle's out-of-band Security Alert fixed a 9.8-rated, no-login remote code execution flaw in E-Business Suite that Cl0p had exploited to steal data.

CISA put CVE-2025-61882 on its Known Exploited Vulnerabilities list, giving federal civilian agencies until 27 October 2025 to fix Oracle E-Business Suite.

Qualcomm and Google disclosed a memory-corruption bug in an open-source Qualcomm graphics component, affecting more than 230 chipsets, that 'may be under limited, targeted exploitation'.

Oracle's Security Alert for CVE-2026-35273, a 9.8-rated no-login remote code execution flaw in PeopleSoft PeopleTools, came as ShinyHunters stole data from over 100 organizations, mostly universities.

Microsoft's largest security update ever patches 966 vulnerabilities, including two Windows privilege-escalation zero-days already exploited in attacks and 105 rated Critical.