Tag

#zero-day

2 stories tagged zero-day.

Abstract stepped ascending pattern representing Windows LegacyHive privilege escalation from standard user to admin. Four of eight Nightmare Eclipse zero-day disclosures remain unpatched.

LegacyHive Windows zero-day puts admin access at risk

LegacyHive is a public Windows zero-day that escalates standard users to admin on patched systems. No CVE or patch yet, but MDE detection queries exist.

Lars Cornelissen · Jul 19, 2026

Bar chart comparing CVSS scores for two SonicWall SMA 1000 zero-day vulnerabilities: CVE-2026-15409 at 10.0 critical SSRF and CVE-2026-15410 at 7.2 high code injection, both actively exploited in the wild and added to CISA KEV on July 14 2026

Cyber security

Two SonicWall SMA 1000 zero-days under active attack

Two SonicWall SMA 1000 zero-day vulnerabilities including a CVSS 10.0 SSRF are under active exploitation. CISA KEV-listed with a July 17 patch deadline.

Lars Cornelissen · Jul 15, 2026