News
ShinyHunters Bypasses WAFs with URL Trick to Exploit Oracle PeopleSoft
The ShinyHunters extortion gang is exploiting the Oracle PeopleSoft CVE-2026-35273 zero-day using a percent-encoded URL to bypass web application firewalls.
News
News on Zero Day Room.
News
Google fined $462 million by EU for location data violations
Ireland's Data Protection Commission has fined Google over €403 million for GDPR violations related to its processing of location data.
News
Twitch Extension Leaks 31,000 User OAuth Tokens to Russian Bot Operator
A malicious Twitch browser extension forwarded live OAuth tokens for approximately 31,000 users to proxy servers operated by a Russian commercial bot service.
News
Grindr settles UK data privacy lawsuit for £26 million
Grindr will pay £26 million to settle a UK group action alleging it unlawfully shared sensitive user data, including HIV status.
News
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
Security researcher Nightmare Eclipse, also known as Chaotic Eclipse, Infinite Nightmare, and MSNightmare, has released three new zero-day exploits.
News
FalconFlank PoC Exposes CrowdStrike Privilege Escalation
A researcher released a proof-of-concept exploit for a privilege escalation flaw in CrowdStrike Falcon, dubbed FalconFlank.