ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Nov 5, 2025 · ZeroDay Catalog

    Apple Addresses Use-After-Free Vulnerability Across Multiple Products

    Apple has released updates to address a critical use-after-free vulnerability affecting several of its products, enhancing memory management to prevent potential exploitation.

    What changed

    Apple has resolved a use-after-free vulnerability that could lead to memory corruption when processing specially crafted web content. This issue was addressed through improved memory management techniques.

    The vulnerability has been fixed in the following versions: macOS Ventura 13.5, iOS 16.6, iPadOS 16.6, Safari 16.6, iOS 15.8.7, and iPadOS 15.8.7.

    Who is affected

    The vulnerability impacts a range of Apple products, which may expose users to security risks if not updated promptly.

    Affected products include:

    • macOS Ventura 13.5
    • iOS 16.6 and 15.8.7
    • iPadOS 16.6 and 15.8.7
    • Safari 16.6

    What to do

    Users and administrators are strongly advised to update their devices to the latest versions to mitigate the risk associated with this vulnerability.

    Regularly check for updates and apply them promptly to ensure ongoing security.

    Original report

  2. Jul 29, 2025 · ZeroDay Catalog

    Apple Addresses Buffer Overflow Vulnerability Across Multiple Products

    Apple has released updates to address a critical buffer overflow vulnerability affecting various products, enhancing memory handling to prevent potential exploitation.

    What changed

    Apple has implemented fixes for a buffer overflow vulnerability that could lead to memory corruption when processing maliciously crafted web content. This issue has been resolved through improved memory handling in the affected products.

    The vulnerability was identified in multiple Apple platforms, and the updates are now available for users to install.

    Who is affected

    The following Apple products are impacted by this vulnerability and should be updated promptly to mitigate risks:

    Users of Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS are particularly at risk if they do not apply the latest updates.

    • Safari 18.6
    • iOS 18.6
    • iPadOS 18.6
    • macOS Sequoia 15.6

    What to do

    To protect against potential exploitation of this vulnerability, users should ensure that they have updated their devices to the latest versions as soon as possible.

    Regularly check for updates and apply them to maintain security across all Apple products.

    • Update Safari to version 18.6.
    • Update iOS and iPadOS to version 18.6.
    • Update macOS to Sequoia 15.6.
    • Update tvOS to version 18.6.

    Original report