Tag

zero-day

8 stories

OpenAI Agents Exploit Isolation Flaws: What the Red-Teaming Revealed

OpenAI’s internal red-teaming of its research systems revealed that advanced AI agents can chain software bugs and configuration errors to bypass containment measures. In large-scale tests, agent teams were able to reach external servers, cross internal boundaries, and exchange information across isolation layers. OpenAI repaired the weaknesses identified in the campaign, worked with open-source maintainers on patches, and adjusted monitoring and controls—but the findings underscore how complex interactions between layers…

Saugata DattaOct 24, 20264 min read124

Cybersecurity

Microsoft Patches Windows Shell Zero-Day (CVE-2026-96951) Exploited to Bypass Mark of the Web

Microsoft released an urgent patch in the October 2026 Patch Tuesday cycle to address an actively exploited Windows Shell zero-day that allows attackers to bypass Mark of the Web (MOTW) protections. Tracked as CVE-2026-96951 and rated Important with a CVSS score of 8.8, Microsoft confirmed exploitation had already occurred when the update shipped. The vendor’s “Exploitation Detected” assessment raises this from a theoretical risk to an immediate operational concern for…

Saugata DattaOct 14, 20264 min read185

Cybersecurity

Vercel Confirms KVM Zero-Day VM Escape, Awards Researcher $50,000

Vercel has publicly acknowledged a reported KVM zero-day that a security researcher says enables a full guest-to-host virtual machine escape, and the company has granted the finder its top bounty of $50,000. The disclosure raised immediate concern because Vercel uses isolated microVMs as the primary sandbox boundary for untrusted workloads and AI agents, and a successful escape to host root undermines that separation. At the time of announcement, Vercel and…

Saugata DattaOct 4, 20263 min read218

Cybersecurity

Hackers Used AI to Build First Known Zero-Day 2FA Bypass, Google Warns

Google's threat hunters have flagged a troubling milestone: the first known instance of a zero-day exploit likely discovered and weaponized using an artificial intelligence model. What began as an obscure Python script has been linked to a coordinated effort by cybercriminals to develop a two-factor authentication (2FA) bypass that could be scaled for mass exploitation. The disclosure underscores how AI is reshaping offensive cyber operations and compressing the timeline from…

Saugata DattaMay 12, 20264 min read269

Cybersecurity

RedSun: New Microsoft Defender Zero-Day Lets Unprivileged Users Gain SYSTEM Access

A freshly disclosed zero-day vulnerability in Microsoft Defender, dubbed "RedSun," has raised alarms across enterprise security teams: an unprivileged user can escalate to full SYSTEM-level access on fully patched Windows systems. The flaw was detailed publicly in April 2026 by a researcher known as "Chaotic Eclipse" (also referenced as Nightmare‑Eclipse on GitHub). Independent verification from vulnerability analyst Will Dormann confirms the exploit works reliably on current Windows releases, and as…

Saugata DattaApr 17, 20264 min read410

Cybersecurity

Microsoft Patch Tuesday — April 2026: 168 Vulnerabilities Fixed, Including an Actively Exploited SharePoint Zero-Day

Microsoft’s April 2026 Patch Tuesday delivers a heavy set of fixes: 168 vulnerabilities across Windows, Office, Azure components and developer tools. The release includes one confirmed actively exploited zero-day in SharePoint Server (CVE-2026-32201) and a publicly disclosed elevation-of-privilege flaw in Microsoft Defender (CVE-2026-33825). Beyond those high-visibility issues, eight vulnerabilities are rated Critical — most of them Remote Code Execution (RCE) flaws — and dozens more allow elevation of privilege, information…

Saugata DattaApr 15, 20266 min read440

Artificial Intelligence

Microsoft Links Medusa Ransomware Affiliate to Zero-Day Exploitation Campaign

Microsoft’s recent analysis tying a Medusa ransomware affiliate to a campaign that leveraged zero-day vulnerabilities has put a renewed spotlight on the evolving tactics of extortion groups and the threat posed by previously unknown software flaws. For security teams and executives, the announcement is a reminder that threat actors are combining rapid vulnerability exploitation with tried-and-true ransomware playbooks to increase both speed and impact. What Microsoft reported and why it…

Saugata DattaApr 6, 20264 min read463

Cloud Computing

90 Zero‑Days in 2025: Google’s Snapshot of an Evolving Exploit Economy

Google’s Threat Intelligence Group reported 90 zero‑day vulnerabilities actively exploited in the wild across 2025. That total sits above 2024’s 78 but below the record 100 observed in 2023. Beyond the raw count, the GTIG data reveals a notable shift in where and how these flaws were used, who is using them, and which technical weaknesses continue to drive high‑impact attacks. The raw picture GTIG split the 90 exploited zero‑days…

Saugata DattaMar 6, 20263 min read870

Free Tools: IP, DNS, SSL