Curated security research, vulnerabilities, advisories and tools for practitioners.

#zero-day

Security coverage tagged zero-day.

1.

ShieldCrash: Windows Defender 0-Day PoC Bypassing ShieldBreak (CVE-2026-69414) Patch

vulnerability | High | 2026-09-07 20:36 | CVE-2026-69414 | github.com | original ↗ | #cloud | #zero-day | #arbitrary-file-read

2.

StyleSmuggler fix: patch the Magento and Adobe Commerce RCE

advisory | 2026-09-07 00:00 | aikido.dev | original ↗ | #rce | #zero-day | #patching

3.

FalconFlank: CrowdStrike Falcon Sensor 0-Day Local Privilege Escalation Exploit

vulnerability | High | 2026-09-03 02:48 | github.com | original ↗ | #zero-day | #privilege-escalation | #windows

4.

September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

blog | 2026-09-08 00:00 | crowdstrike.com | original ↗ | #zero-day | #vulnerability-management | #microsoft

5.

Flexense SyncBreeze – Unauthenticated Remote Code Execution (0DAY-2025-0002)

vulnerability | Critical | 2026-08-25 06:58 | crowdfense.com | original ↗ | #rce | #zero-day | #authentication-bypass

6.

August 2026 Security Vulnerability: What happened?

advisory | 2026-08-27 00:00 | metabase.com | original ↗ | #cloud | #zero-day | #incident-response

7.

VMs won't contain cyber-capable agents

blog | 2026-08-26 11:00 | blog.trailofbits.com | original ↗ | #ai-security | #cloud | #zero-day

8.

CVE-2026-50656 PoC: Microsoft Defender RoguePlanet elevation-of-privilege patch bypass

vulnerability | High | 2026-08-11 19:35 | CVE-2026-50656 | github.com | original ↗ | #zero-day | #public-poc | #privilege-escalation

9.

Blackhat 2026: Hacking the Past. Hacking the Future.

blog | 2026-08-14 12:00 | xbow.com | original ↗ | #ai-security | #zero-day | #vulnerability-research

10.

August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs

vulnerability | 2026-08-11 00:00 | crowdstrike.com | original ↗ | #zero-day | #vulnerability-management | #microsoft

11.

From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse

research | 2026-08-11 00:00 | lab.ctbb.show | original ↗ | #rce | #supply-chain | #zero-day

12.

A sandbox is only as closed as what an AI agent can reach

blog | 2026-08-12 00:00 | about.gitlab.com | original ↗ | #ai-security | #zero-day | #gitlab

13.

Security update available for Metabase - Please upgrade now

blog | 2026-08-06 00:00 | metabase.com | original ↗ | #cloud | #zero-day | #sql-injection

14.

The OpenAI and Hugging Face Incident: When the Model Hacks the Test

research | 2026-07-22 13:21 | xbow.com | original ↗ | #ai-security | #zero-day | #featured

15.

Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

blog | 2026-07-27 21:30 | jfrog.com | original ↗ | #ai-security | #supply-chain | #zero-day

16.

Introducing Internal Network Scanning: see your network the way an attacker inside it would

vulnerability | 2026-07-21 21:48 | projectdiscovery.io | original ↗ | #bug-bounty | #zero-day | #red-team

17.

Now Detecting: WP2Shell - Pre-Authentication RCE in WordPress Core

vulnerability | Critical | 2026-07-17 00:00 | CVE-2026-63030 | ethiack.com | original ↗ | #rce | #zero-day | #rest-api

18.

Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense

research | 2026-07-20 00:00 | crowdstrike.com | original ↗ | #ai-security | #zero-day | #agentic-ai

19.

Launching: AI Safety For Parents

blog | 2026-06-30 00:00 | josephthacker.com | original ↗ | #ai-security | #zero-day | #ai-safety

20.

CVE-2026-11645: Out-of-Bounds Read/Write in V8.

vulnerability | High | Actively exploited | 2026-06-08 00:00 | CVE-2026-11645 | bugpwn.com | original ↗ | #active-exploitation | #rce | #zero-day

21.

Mybucks.online Wallet Cracking Challenge Recap: Inside the 30-Day Security Challenge

blog | 2026-06-11 08:17 | hackenproof.com | original ↗ | #bug-bounty | #zero-day | #crypto-wallet

22.

Breaking Solidity at Scale: 0-Day AI Smart Contract Auditing and the Workflow That Catches What AI Misses

blog | 2026-06-08 14:57 | hackenproof.com | original ↗ | #ai-security | #web3 | #zero-day

23.

21 Zero-Days in FFmpeg

research | 2026-06-02 12:00 | depthfirst.com | original ↗ | #rce | #zero-day | #memory-safety

24.

What we know about Copy Fail (CVE-2026-31431)

vulnerability | High | Actively exploited | 2026-04-29 22:26 | CVE-2026-31431 | bugcrowd.com | original ↗ | #active-exploitation | #ai-security | #zero-day

25.

A Framework for AI Threat Readiness

blog | 2026-05-08 18:42 | wiz.io | original ↗ | #ai-security | #zero-day | #vulnerability-management

26.

3 ways custom scan checks turn practitioner knowledge into scalable automation

blog | 2026-05-01 06:52 | portswigger.net | original ↗ | #zero-day | #appsec | #burp-suite

27.

A practical CTO security checklist to be Mythos-ready

blog | 2026-04-30 00:00 | aikido.dev | original ↗ | #ai-security | #cloud | #supply-chain

28.

Finding and Patching a CPython 0day in Hours: CVE-2026-6100

vulnerability | Critical | 2026-04-13 20:44 | CVE-2026-6100 | theori.io | original ↗ | #ai-security | #zero-day | #use-after-free

29.

The Frontier Isn’t the Model: Why ‘Good Enough’ Reasoning + Scaffolding Is More Important

research | 2026-04-16 16:18 | theori.io | original ↗ | #ai-security | #zero-day | #agentic-ai

30.

Finding Fast, Fixing Slow: The Crisis of Asymmetric Remediation

blog | 2026-04-17 17:58 | hackerone.com | original ↗ | #ai-security | #zero-day | #mythos