Angry Hacker Drops Microsoft Zero-Day Exploit, 1 Billion Users Warned

A security researcher frustrated with Microsoft has released the BlueHammer Windows zero-day exploit, telling the company, “I ...
The Hacker News

China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware

Storm-1175 exploits 16+ CVEs since 2023, including zero-days, enabling rapid Medusa ransomware attacks within 24 hours.
Hosted on MSN

Notepad++ hack, Office and ESXi zero-days fuel ransomware surge

A fresh wave of ransomware activity is being fueled by an uncomfortable mix of software supply-chain risk, rapidly weaponized zero-day exploits, and attackers growing preference for targeting the ...

Microsoft flags China-based hackers using vicious new 'rapid attack' zero-days

Microsoft warns the window to patch known flaws is shrinking, while the window to abuse zero-days grows.
Bleeping Computer

Google says 90 zero-days were exploited in attacks last year

Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities actively exploited throughout 2025, almost half of them in enterprise software and appliances. The figure is a 15% increase ...
Bleeping Computer

WinRAR zero-day exploited to plant malware on archive extraction

A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware. The flaw is a directory traversal vulnerability that was ...
Computer Weekly

Spyware suppliers exploit more zero-days than nation states

Suppliers of commercial spyware have edged ahead of nation-state threat actors when it comes to the exploitation of zero-day vulnerabilities at scale, according to data released by the Google Threat ...
Forbes

China, Not Iran, The Biggest Zero-Day Cyber Threat

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. China, not Iran, dominates Google's zero-day exploit report. Although, as the ongoing war ...
SiliconANGLE

Google Threat Intelligence Group warns enterprise systems increasingly targeted by zero-day exploits

A new report out today from Google LLC’s Threat Intelligence Group finds that zero-day vulnerability exploitation remained elevated in 2025 as attackers increasingly targeted enterprise infrastructure ...