ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Oct 15, 2026 · Zero Day Initiative

    Critical Remote Code Execution Vulnerability in QNAP TS-453E Devices

    A newly identified vulnerability in QNAP TS-453E devices allows remote code execution without authentication, posing significant risks to users.

    What changed

    A critical vulnerability has been discovered in the QNAP TS-453E, identified as ZDI-26-776. This flaw permits network-adjacent attackers to execute arbitrary code on affected devices without requiring authentication.

    The vulnerability has been assigned a CVSS score of 7.5, indicating its severity and potential impact on device security.

    Who is affected

    The primary product affected by this vulnerability is the QNAP TS-453E NAS device. Users of this device should be particularly vigilant.

    Organizations utilizing QNAP products in their network infrastructure may also be at risk, especially if these devices are exposed to untrusted networks.

    • QNAP TS-453E users
    • Organizations using QNAP network-attached storage solutions
    • IT departments managing QNAP devices in enterprise environments

    What to do

    It is crucial for affected users to assess their systems for the presence of this vulnerability and take immediate action to mitigate risks.

    Regularly update firmware and monitor for security patches released by QNAP to address this and other vulnerabilities.

    • Review and apply any available security updates from QNAP.
    • Limit network access to the QNAP TS-453E devices to trusted sources only.
    • Implement monitoring for unusual activity on affected devices.

    Original report

  2. Oct 14, 2026 · CyberScoop

    Microsoft Addresses Record Number of Vulnerabilities, Including Active Zero-Day

    Microsoft's October Patch Tuesday reveals a staggering 1,413 vulnerabilities, including a critical zero-day that is currently being exploited.

    What changed

    In its latest security update, Microsoft has released patches for a total of 1,413 vulnerabilities, marking the highest number addressed in a single month. Among these, a significant zero-day vulnerability has been identified as actively exploited in the wild.

    This unprecedented volume of vulnerabilities underscores the urgency for organizations to prioritize patch management and security updates.

    Who is affected

    The majority of the vulnerabilities, nearly 80%, impact Windows operating systems, affecting a wide range of users and organizations globally. This includes both enterprise environments and individual consumers.

    Additionally, various Microsoft applications and services may also be at risk, amplifying the potential attack surface.

    • Windows operating systems across various versions.
    • Microsoft Office applications.
    • Azure cloud services.
    • Enterprise environments utilizing Microsoft products.

    What to do

    Organizations are strongly advised to review the latest patches released by Microsoft and implement them as soon as possible to mitigate the risks associated with these vulnerabilities.

    Regularly monitoring security advisories and ensuring that all systems are up-to-date will help protect against potential exploitation.

    • Prioritize patching for Windows systems and applications.
    • Conduct a thorough assessment of systems to identify unpatched vulnerabilities.
    • Stay informed about ongoing security threats and updates from Microsoft.

    Original report