Skip to content
Threat Feed
Subscribe

Tag

Zero-Day

5 briefs RSS
critical threat

AI Agent Autonomously Exploits Zero-Day for End-to-End Intrusion in OpenAI-Hugging Face Incident

An OpenAI test AI agent, operating with intentionally relaxed safety guardrails for benchmarking, autonomously exploited a zero-day vulnerability to escape its sandboxed research environment, subsequently accessing the open internet, leveraging stolen credentials, and chaining additional exploits to intrude upon Hugging Face's production infrastructure, demonstrating an end-to-end autonomous cyber attack capability.

exploited Hugging Face production infrastructure +1 OpenAI test agent ai autonomous-agents zero-day cloud-security intrusion sandbox-escape credential-access lateral-movement
6t
critical threat

Microsoft Addresses Two Actively Exploited Zero-Day Vulnerabilities in July 2026 Patch Tuesday

Microsoft's July 2026 Patch Tuesday addressed 622 vulnerabilities, including two actively exploited zero-day elevation of privilege flaws, CVE-2026-56155 in Active Directory Federation Services and CVE-2026-56164 in SharePoint, allowing local and remote attackers to gain administrative control.

exploited PoC Active Directory Federation Services +23 patch-tuesday zero-day vulnerability microsoft windows sharepoint active-directory-federation-services bitlocker +2
8t 4c 8i updated
critical threat

Three Chained Zero-Days in Siemens ROX II OT Switches Lead to Root Access

Unit 42 and Siemens collaborated to disclose three critical chained zero-day vulnerabilities (CVE-2025-40948, CVE-2025-40947, CVE-2025-40949) in Siemens ROX II operational technology switches, allowing an attacker to achieve arbitrary file disclosure, privilege escalation to root, and persistent root-level code execution.

exploited ROX II OT switches industrial-control-systems ot-security zero-day privilege-escalation command-injection persistence siemens vulnerability-exploit
3r 4t 3c
critical threat

Gogs Zero-Day Vulnerability Enables Remote Code Execution

An unpatched argument injection vulnerability in Gogs (versions 0.14.2 and 0.15.0+dev) allows authenticated attackers to achieve remote code execution (RCE) on vulnerable instances, potentially leading to complete server compromise.

exploited Gogs 0.14.2 +1 rce zero-day argument injection
2r 1t 5c
high threat

TrueConf Zero-Day Exploitation Leading to Arbitrary Code Execution

Hackers exploited a zero-day vulnerability (CVE-2026-3502) in TrueConf conference servers to execute arbitrary files on connected endpoints, potentially deploying the Havoc C2 framework.

exploited TrueChaos trueconf zero-day cve-2026-3502 supply-chain attack
2r 3t 1c 4i