The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.

A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti's ICS appliances to breach ...

Somewhere in the world, a group of hackers fed an artificial intelligence tool a software flaw that no one knew existed. The AI did not just analyze the bug. According to Google, it built a working ...

A new report from the Google Threat Intelligence Group (GTIG) reveals that sophisticated hacker groups have started using AI tools to help create and deploy zero-day exploits. The revelation confirms ...

Apple iOS zero-day CVE-2026-86950 was actively exploited in targeted attacks on iPhones before rival Meta's security team caught it and reported it. Apple patched the CoreGraphics out-of-bounds write ...

The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact ...

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into ...

Google identified the first zero-day exploit it believes was developed with AI and thwarted a planned mass exploitation event. The GTIG report documents state-sponsored actors from China, North Korea, ...

In any business environment continuously driven by software, flaws discovered and used by bad actors can be devastating. Problems discovered in firmware, hardware, OSes and software applications must ...

Update 5/21: Since this article was released, recommend mitigations for YellowKey and other attacks have been released, as well as a full patch for BlueHammer. A cyber security expert that goes by the ...

Hacking code overlaid on a display with a person's finger - amgun/Shutterstock A new report from the Google Threat Intelligence Group (GTIG) reveals that sophisticated hacker groups have started using ...