#ZeroDay

www.volexity.com

UTA0565 Chrome/Windows 0-Day Campaign

securityonline.info

Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10

TL;DR On September 22, 2026, Arista Networks warned of active attacks against a critical VeloCloud vulnerability. Tracked as CVE-2026-93952, the flaw earns a maximum CVSS rating of 10.0. The vendor confirmed that threat actors actively exploit this security defect in the wild. Why It Matters Enterprise SD-WAN controllers serve as the central backbone for distributed corporate networks. Industry estimates indicate that thousands of global enterprise branches rely on VeloCloud infrastructure.

securityonline.info

cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS

TL;DR A researcher published cups2root, a working proof-of-concept that escalates a local lpadmin user to root on CUPS. The exploit chains several configuration and privilege-boundary flaws. No CVE, vendor advisory, or patch exists yet. The PoC code is already public on GitHub. Why This CUPS Privilege Escalation Matters CUPS ships on most Linux desktops and many servers. As a result, the lpadmin group is common on real systems.

securityonline.info

Public PoC Disclosed for Android Telecom Vulnerability CVE-2026-49881

TL;DR A critical logic flaw exists in the Android 17 Telecom service. The Android Telecom vulnerability allows unprivileged applications to execute arbitrary code within the system server. Furthermore, the details of the vulnerability and the proof-of-concept exploit code have been publicly disclosed. Users must apply the latest security patches to mitigate this severe threat. Why It Matters This Android Telecom vulnerability poses a massive risk to mobile security.

inferlume.com

Linux Kernel Zero Days Cisco Root RCE And DPRK Developer Backdoors - Inferlume

{{rh9e7yNRO}}

meterpreter.org

Four Ancient Linux Kernel Flaws Get Root Exploits

Four severe vulnerabilities deeply embedded within the Linux kernel, lurking undetected for 10 to 21 years, finally have functional public exploits. Consequently, these critical flaws allow attackers to achieve root privilege escalation. These vulnerabilities primarily target various network subsystems. Alarmingly, under specific configurations, one of these flaws theoretically transitions from a local attack vector to complete remote system compromise. The LPE Quartet Vulnerabilities Explained…

dlvr.it

10 Thriller Shows That Feel Completely Different After the Big Reveal

Discover gripping thriller shows that completely transform after surprising plot twists, including Mr. Robot, Sugar, and Behind Her Eyes.

www.anthropic.com

Investigating three incidents in our cybersecurity evaluations

We found three cases where a Claude model reached the internet from an evaluation environment and accessed real systems. We share what happened and what we're changing.

cyberscoop.com

Cisco alerts customers to second actively exploited zero-day in as many days | CyberScoop

The latest zero-day has a maximum-severity rating and affects Cisco Identity Services Engine, a product hit with three actively exploited vulnerabilities since June 2025.