https://zerodayroom.com/index.html2026-08-19https://zerodayroom.com/share-home.svg https://zerodayroom.com/twinloot-abuses-sharepoint-teams.html2026-08-19https://zerodayroom.com/share-twinloot-abuses-sharepoint-teams.svgTWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across NetworksCybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT, which abuses SharePoint and Teams to steal credentials and move across networks. https://zerodayroom.com/typosquatted-rubygems-packages-steal.html2026-08-19https://zerodayroom.com/share-typosquatted-rubygems-packages-steal.svgTyposquatted RubyGems Packages Steal Browser Credentials and Crypto WalletsCybersecurity researchers have discovered a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, dubbed StubMaker, has been tracked by... https://zerodayroom.com/one-attacker-scrapes-salesforce.html2026-08-19https://zerodayroom.com/share-one-attacker-scrapes-salesforce.svgOne Attacker Scrapes Salesforce and ServiceNow PortalsA single attacker has been scraping records from both Salesforce and ServiceNow customer portals across multiple industries for over a year. (Source: The Hacker News) https://zerodayroom.com/safepal-hardware-wallet-maker.html2026-08-19https://zerodayroom.com/share-safepal-hardware-wallet-maker.svgSafePal Hardware Wallet Maker Discloses Data Exposure Affecting Nearly 40,000 CustomersSafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the data of approximately 39,798 customers. (Source: The Hacker News) https://zerodayroom.com/attackers-exploit-mlflow-ssrf.html2026-08-18https://zerodayroom.com/share-attackers-exploit-mlflow-ssrf.svgAttackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsMalicious actors are targeting open-source AI platform MLflow and web-based SCADA software FUXA with critical vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/ransomware-affiliate-ransom-busters.html2026-08-18https://zerodayroom.com/share-ransomware-affiliate-ransom-busters.svgRansomware Affiliate 'Ransom Busters' Claims to Delete Stolen Data for a FeeA ransomware affiliate, 'Ransom Busters', has been sending emails to victim organizations claiming to delete stolen data from ransomware groups' servers in exchange for a fee ranging from $20,000 to... https://zerodayroom.com/ai-mind-viruses-demonstrate.html2026-08-18https://zerodayroom.com/share-ai-mind-viruses-demonstrate.svgAI 'Mind Viruses' Demonstrate Self-Replicating Payloads Across Agent NetworksResearchers at Anthropic and EPFL have shown that AI agents can spread self-propagating payloads, dubbed 'mind viruses,' through persistent system prompt files. While no wild infections have been... https://zerodayroom.com/microsoft-copilot-personal-flaws.html2026-08-18https://zerodayroom.com/share-microsoft-copilot-personal-flaws.svgMicrosoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected AppsVaronis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that could allow a single click on a crafted link to silently pull data from connected apps and other information... https://zerodayroom.com/cisa-flags-actively-exploited.html2026-08-18https://zerodayroom.com/share-cisa-flags-actively-exploited.svgCISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCEThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. https://zerodayroom.com/critical-gitlab-graphql-flaw.html2026-08-18https://zerodayroom.com/share-critical-gitlab-graphql-flaw.svgCritical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public ProjectsGitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software. (Source: The Hacker News) https://zerodayroom.com/unisoc-volte-video-call.html2026-08-18https://zerodayroom.com/share-unisoc-volte-video-call.svgUnisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel AccessSecurity researchers have discovered a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call. (Source: The Hacker News) https://zerodayroom.com/mcp-servers-hidden-gap.html2026-08-18https://zerodayroom.com/share-mcp-servers-hidden-gap.svgMCP Servers: A Hidden Gap in Enterprise SecurityMCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access, and prompt injection, highlighting the need for robust security measures to protect... https://zerodayroom.com/cavern-c2-framework-evolves.html2026-08-17https://zerodayroom.com/share-cavern-c2-framework-evolves.svgCavern C2 Framework Evolves with New Communication Module and Google Apps Script RelayKaspersky researchers have discovered new components in the Cavern command-and-control framework used by Iranian nation-state hackers, expanding its communication capabilities and allowing it to... https://zerodayroom.com/cybersecurity-threats-week-review.html2026-08-17https://zerodayroom.com/share-cybersecurity-threats-week-review.svgCybersecurity Threats: A Week in ReviewA summary of the latest cybersecurity threats and vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/snowflake-github-actions-flaw.html2026-08-17https://zerodayroom.com/share-snowflake-github-actions-flaw.svgSnowflake GitHub Actions Flaw Exposes Jira Credentials to Workflow Injection AttacksA vulnerability in Snowflake's public GitHub repository allowed attackers to inject commands into a workflow containing internal Jira credentials, potentially exposing sensitive information. https://zerodayroom.com/critical-flaws-wordpress-plugins.html2026-08-17https://zerodayroom.com/share-critical-flaws-wordpress-plugins.svgCritical Flaws in WordPress Plugins Expose Sites to Unauthenticated RCE and Auth Bypass AttacksTwo high-severity vulnerabilities have been discovered in popular WordPress plugins, Forminator Forms and User Profile Builder, allowing unauthenticated attackers to execute arbitrary code and gain... https://zerodayroom.com/microsoft-defender-patch-bypass-e95232.html2026-08-17https://zerodayroom.com/share-microsoft-defender-patch-bypass-e95232.svgMicrosoft Defender Patch Bypass Exploit Claims SYSTEM AccessA security researcher has released a proof-of-concept exploit for a Microsoft zero-day vulnerability, claiming it can bypass a previously released patch and grant an attacker SYSTEM-level privileges. https://zerodayroom.com/cisco-asa-ftd-flaw-ede96a.html2026-08-17https://zerodayroom.com/share-cisco-asa-ftd-flaw-ede96a.svgCisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoSA high-severity vulnerability in Cisco's Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild, allowing an... https://zerodayroom.com/sap-commerce-cloud-vulnerability-9c4fb6.html2026-08-17https://zerodayroom.com/share-sap-commerce-cloud-vulnerability-9c4fb6.svgSAP Commerce Cloud Vulnerability Allows Unauthenticated Attackers to Execute Arbitrary CodeSAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. (Source: The Hacker News) https://zerodayroom.com/microsoft-patches-flaws-including-73b10d.html2026-08-17https://zerodayroom.com/share-microsoft-patches-flaws-including-73b10d.svgMicrosoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active AttackMicrosoft has released its monthly security updates, addressing 398 flaws, including a Windows driver zero-day under active attack. (Source: The Hacker News) https://zerodayroom.com/adobe-patches-critical-flaws-96b5e1.html2026-08-16https://zerodayroom.com/share-adobe-patches-critical-flaws-96b5e1.svgAdobe Patches Critical Flaws in ColdFusion, Commerce, and Campaign ClassicAdobe releases updates to address multiple critical security vulnerabilities in ColdFusion, Commerce, and Campaign Classic, with some flaws having a CVSS score of 10.0. (Source: The Hacker News) https://zerodayroom.com/malicious-litellm-releases-may-1b59d6.html2026-08-16https://zerodayroom.com/share-malicious-litellm-releases-may-1b59d6.svgMalicious LiteLLM Releases May Have Exposed Thousands of OrganizationsA recent investigation has revealed that two malicious LiteLLM releases were published on PyPI in March, potentially exposing over 2,500 organizations to credential-stealing code. https://zerodayroom.com/attackers-exploit-vmware-vcenter-a0ae0c.html2026-08-16https://zerodayroom.com/share-attackers-exploit-vmware-vcenter-a0ae0c.svgAttackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessThreat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability, CVE-2026-59310, is a... https://zerodayroom.com/enterprise-defenses-recovered-edge-2689d1.html2026-08-16https://zerodayroom.com/share-enterprise-defenses-recovered-edge-2689d1.svgEnterprise Defenses Recovered at the Edge, Collapsed InsideA recent report by Picus Labs reveals that enterprise defenses have made significant improvements at the perimeter, but are struggling to prevent quiet attacks inside the network. https://zerodayroom.com/category-vulnerabilities.html2026-08-18 https://zerodayroom.com/category-threats.html2026-08-18 https://zerodayroom.com/about.html https://zerodayroom.com/sources-and-methods.html https://zerodayroom.com/corrections.html