zero-day — Cybersecurity News

Ivanti Connect Secure Hit by Three-Zero-Day Chain, Only Two Patched

RedSide Security October 14, 2026 Vulnerability 65 views

An attacker chained three zero-day flaws in Ivanti Connect Secure to gain root access without authentication. Ivanti has patched two, but a third fix is still pending, leaving organizations exposed.

Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

RedSide Security October 12, 2026 Cybersecurity 74 views

This week's cybersecurity recap covers helpdesk 0-days exploited within hours, rogue certificates, the ShinyHunters arrest, AI-fooling malware, and questionable ransomware negotiators.

Pwn2Own Ireland 2026 Day One: 32 Zero‑Days, $388,500, and a Pixel 10 Miss

RedSide Security October 07, 2026 Vulnerability 136 views

Pwn2Own Ireland 2026 opened with 32 unique zero-days exploited and $388,500 awarded, as Samsung Galaxy S26, OpenAI Codex, and smart home devices fell to working attacks while a Google Pixel 10 attempt failed within the time limit.

TeamPCP and BreachForums Launch $1,000 Contest to Drive Open-Source Supply Chain Attacks

RedSide Security May 14, 2026 Cybersecurity 209 views

Cybercrime groups **TeamPCP** and **BreachForums** are reportedly running a coordinated contest offering a $1,000 Monero prize for supply chain attacks targeting open-source ecosystems. The competition incentivizes participants to compromise software packages and CI/CD pipelines using a malicious tool called “Shai-Hulud,” raising serious concerns about large-scale, crowdsourced software supply chain compromise.

New BitUnlocker Downgrade Attack on Windows 11 Allows Access to Encrypted Disks in 5 Minutes

RedSide Security May 13, 2026 Vulnerability 247 views

Researchers have unveiled BitUnlocker, a new downgrade attack capable of bypassing Microsoft BitLocker encryption on patched Windows 11 systems in under five minutes. The attack abuses a flaw in the Windows Recovery Environment (WinRE) and a trusted legacy Secure Boot certificate to boot vulnerable components, allowing attackers with physical access to decrypt protected drives without triggering security alerts.

APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday

RedSide Security March 03, 2026 Cyber Attacks 233 views

Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)

RedSide Security February 17, 2026 CVE 564 views

Chrome 0-Day Vulnerability Actively Exploited by Attackers in the Wild

RedSide Security February 16, 2026 Vulnerability 226 views

Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices

RedSide Security February 13, 2026 Vulnerability 196 views

Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released

RedSide Security January 30, 2026 Vulnerability 204 views