ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Oct 13, 2026 · Krebs on Security

    Microsoft Addresses Over 1,400 Security Vulnerabilities in Major Update

    Microsoft has released a substantial update addressing more than 1,400 security vulnerabilities across its software, significantly surpassing previous patch records.

    What changed

    Microsoft has rolled out a comprehensive update that resolves over 1,400 security vulnerabilities in its Windows operating systems and various software products. This update marks a significant increase compared to previous months, particularly the nearly 1,000 vulnerabilities addressed in September.

    The scale of this patch underscores the ongoing commitment of Microsoft to enhance security and protect users from potential threats.

    Who is affected

    The extensive nature of this update means that a wide range of Microsoft products and services are impacted, affecting numerous users and organizations globally.

    Key affected products include:

    • Windows operating systems, including Windows 10 and Windows 11
    • Microsoft Office suite, including Word and Excel
    • Azure cloud services
    • Microsoft Exchange Server

    What to do

    Organizations and users are strongly advised to apply these updates promptly to mitigate the risk of exploitation from these vulnerabilities. Regular patch management should be a priority to maintain security integrity.

    Ensure that all systems are configured to receive automatic updates, and conduct a review of security protocols to address any potential vulnerabilities.

    Original report

  2. Oct 5, 2026 · ZeroDay Catalog

    Critical Vulnerability in Atlassian Products Allows Unauthenticated File Access

    A critical vulnerability has been identified in multiple Atlassian products, enabling unauthenticated access to sensitive files.

    What changed

    A critical vulnerability, identified as CVE-2026-21589, has been discovered in various Atlassian products. This flaw allows unauthenticated attackers to gain access to specific files within the web application root directory.

    The exploitation of this vulnerability requires prior knowledge of the exact file name and path, meaning attackers cannot enumerate or list directory contents.

    Who is affected

    Organizations utilizing the following Atlassian products are at risk due to this vulnerability:

    Affected products include Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye.

    • Bitbucket Data Center
    • Confluence Data Center
    • Jira Service Management Data Center
    • Jira Software Data Center

    What to do

    It is crucial for organizations using the affected Atlassian products to assess their systems for exposure to this vulnerability. Immediate action should be taken to secure sensitive files.

    Regularly updating to the latest versions of the software and reviewing access controls can help mitigate the risks associated with this vulnerability.

    • Update to the latest versions of the affected Atlassian products.
    • Review and tighten access controls for sensitive files.
    • Monitor for any unusual access patterns that may indicate exploitation attempts.

    Original report