ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Oct 16, 2026 · SecurityWeek

    Critical Vulnerabilities Patched by F5 and Juniper Networks

    F5 and Juniper Networks have released patches addressing critical vulnerabilities that could allow remote code execution and complete device control.

    What changed

    F5 and Juniper Networks have issued important security updates to mitigate critical vulnerabilities in their products. These vulnerabilities, if exploited, could enable attackers to execute arbitrary code remotely, potentially leading to a complete takeover of affected devices.

    Who is affected

    Organizations utilizing products from F5 and Juniper Networks may be at risk due to these vulnerabilities. Prompt action is necessary to secure systems and prevent potential exploitation.

    • F5 Networks products, including application delivery controllers and security solutions.
    • Juniper Networks routers and switches that are part of enterprise networks.
    • Any organizations relying on these vendors for network infrastructure and security.

    What to do

    Security teams should prioritize the application of the latest patches provided by F5 and Juniper Networks. Conduct thorough assessments of network devices to identify any that may be vulnerable.

    • Review and apply the latest security updates from F5 and Juniper Networks immediately.
    • Monitor network traffic for any suspicious activity that may indicate exploitation attempts.
    • Educate staff about the importance of maintaining updated systems to mitigate risks.

    Original report

  2. Oct 16, 2026 · Zero Day Initiative

    Critical Privilege Escalation Vulnerability Discovered in FreeBSD Kernel

    A significant privilege escalation vulnerability has been identified in the FreeBSD Kernel, allowing local attackers to gain elevated permissions.

    What changed

    A local privilege escalation vulnerability has been identified in the FreeBSD Kernel, specifically a Time-Of-Check Time-Of-Use (TOCTOU) issue. This flaw enables local attackers to escalate their privileges on affected systems, potentially leading to unauthorized access and control.

    The vulnerability has been assigned a CVSS score of 7.8, indicating a high severity level, which necessitates prompt attention from system administrators.

    Who is affected

    This vulnerability affects installations of the FreeBSD Kernel, which is widely used in various environments, including servers and embedded systems.

    Organizations utilizing FreeBSD in their infrastructure should be particularly vigilant.

    • FreeBSD Kernel installations across various versions
    • Organizations relying on FreeBSD for server operations
    • Developers deploying applications on FreeBSD systems

    What to do

    System administrators are advised to assess their FreeBSD installations for exposure to this vulnerability. Immediate action should be taken to apply any available patches or mitigations.

    Regularly monitor security advisories from FreeBSD and related security platforms to stay informed about updates and fixes.

    • Review system logs for any unauthorized access attempts
    • Implement strict access controls to limit execution of low-privileged code
    • Stay updated with the latest security patches from FreeBSD

    Original report