ServiceNow Zero-Day Used to Breach Customer Instances — Patched Silently on June 5
ServiceNow customers got unwelcome news this week: unknown threat actors actively exploited an unauthenticated flaw to gain deeper access to…
zero-day
Microsoft Defender Zero-Day ‘RoguePlanet’ Hands Attackers SYSTEM Privileges on Fully Patched Windows PCs
A new Microsoft Defender zero-day called ‘RoguePlanet’ lets attackers gain SYSTEM privileges on fully patched Windows 10 and 11 machines. The race condition exploit published by researcher Nightmare Eclipse works against June 2026 Patch Tuesday systems — and there’s no fix yet.
Microsoft Patches Windows 0-Day Amid Heated Public Feud With Security Researcher
Microsoft’s latest Patch Tuesday fixed a zero-day vulnerability disclosed by researcher Nightmare Eclipse, as the two remain locked in a heated public dispute over responsible disclosure practices. The same patch bundle also addressed another flaw originally thought fixed six years ago.
Cisco’s SD-Wan Hit By Seventh Zero-Day Exploited This Year — And There’s Still No Fix
Cisco’s SD-WAN platform has its seventh actively exploited zero-day of 2026 — CVE-2026-20245 lets attackers run commands as root, and there’s still no patch available.
Google Patches Fifth Chrome Zero-Day This Year — And Attackers Are Already Using It
Google patched CVE-2026-11645, a fifth Chrome zero-day this year, involving a V8 out-of-bounds read/write that can bypass ASLR. The exploit is already in the wild — here’s what to do.
Cisco’s SD-Wan Problems Won’t Stop — 7th Zero-Day Hit in 2026 Alone
Cisco disclosed its seventh SD-WAN zero-day of 2026 — CVE-2026-20245 — a command injection flaw allowing root access on Catalyst SD-WAN Manager. No patch is available yet, and there’s no workaround.
Cisco’s SD-WAN Nightmare: 7th Zero-Day Hit in 2026 and Still No Patch
Cisco disclosed its 7th actively exploited SD-WAN zero-day in 2026. CVE-2026-20245 allows root command execution with no patch available yet. Here’s what defenders need to know.
Cisco’s SD-Wan Problems Keep Piling Up — Seventh Zero-Day Exploited This Year Alone
Cisco disclosed its seventh exploited SD-WAN zero-day of 2026. CVE-2026-20245 allows root command execution with no patch available yet. Here’s what defenders need to know.
Cisco’s SD-Wan Nightmare Continues: Seventh Zero-Day Exploited This Year Alone
Cisco disclosed its seventh exploited SD-WAN zero-day of 2026. CVE-2026-20245 allows root-level command execution with no patch available yet. Here’s what organizations need to know and do right now.