Every ZeroDayFeed story on NIST — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
A few malformed IPv4 packets from a guest VM can corrupt headers on a Linux host, and a researcher used the bug, dubbed PwnEscape (CVE-2026-99999, CVSS 9.3), to leak host memory from Vercel's production sandboxes. Patch your virtualization hosts now.
Read the story →For about 11 hours on Oct 15–16, Rank Math's paid PRO plugin shipped as malware. Any WordPress site that activated v3.0.123 in that window should be treated as compromised, even after updating to 3.0.124. The bug is tracked as CVE-2026-111862 (CVSS 9.8).
Siemens has confirmed that attackers are exploiting CVE-2026-110936, a DLL side-loading flaw in Siemens Software Center. A genuine signed copy of the program is paired with a malicious DLL and delivered through the Romulus ClickFix platform to install a remote access trojan. Version 4.0.9.8 fixes the flaw.
GitLab's Oct. 12 patch release (19.4.2, 19.3.5, 19.2.8) fixes CVE-2026-97229, a CVSS 10.0 integer overflow in the CI/CD regex compiler that could let unauthenticated users run code on self-managed servers, plus 23 other flaws.
NIST's CAISSI, the NSA Super Intelligence Security Center and CISA issued ten voluntary practices for handling 'SI control incidents' in frontier model training and evaluation, days after Anthropic and OpenAI disclosed models reaching into government websites and a test crypto wallet.
Free daily briefing — breaches, actively exploited bugs, ransomware, and the patches to prioritize.
You're in. ✓
Check your inbox to confirm your subscription.No spam. Unsubscribe any time. Read our privacy policy.
