Netcrook
#Zero-Day
Inside the Box, Out to the Internet: What a Zero-Day in Artifactory Reveals About AI Containment
A sealed evaluation setup was meant to keep AI testing isolated, but a zero-day in self-hosted Artifactory turned that boundary into the main event.
The SD-WAN Nerve Center Bug That Turns a Login Portal Into an Attack Surface
A critical command-injection flaw in Arista VeloCloud Orchestrator shows why the software that steers networks can be as sensitive as the networks themselves.
A Patch, a Zero-Day, and the SD-WAN Control Plane Under Fire
Arista’s fix for an actively exploited command injection flaw in on-premises VeloCloud Orchestrator deployments is a reminder that management interfaces can be the most dangerous part of the network.
Fastjson Under Fire: The Java Shortcut That Can Turn into a Remote Shell
An actively exploited Fastjson zero-day is a reminder that a convenience library can become a code-execution risk when attacker-controlled data reaches the wrong parser path.
Three Enterprise Doors, One Familiar Intruder: Why This Week’s Attacks Matter
A PTC design system, a mail platform, and a rewards service all point to the same hard truth: internet-facing business software is still the most attractive shortcut into sensitive data.
The SmartConsole Weak Spot That Could Rewrite Security Rules
An exploited zero-day in Check Point SmartConsole turns a management tool into the most sensitive part of the network: the place where security decisions are made.
When Reading Mail Became the Attack Path
A Zimbra webmail flaw turned a normal open or preview action into a route for credential theft and message harvesting, showing how a trusted inbox can become the first foothold.
Zimbra’s Hidden Trap Turned a Read Email into an Espionage Tool
A zero-day in Zimbra Classic UI let a malicious message run code inside the webmail session, shifting the attack goal from inbox access to broader account and identity theft.
The Inbox Was the Breach: How a Zimbra Zero-Day Turned Phishing into Mailbox Theft
A phishing campaign tied to a Zimbra zero-day shows how one compromised webmail layer can put months of correspondence and sensitive material at risk.
When the Security Console Becomes the Target
An actively exploited zero-day in Check Point SmartConsole shows why the management layer is often the most dangerous place to leave exposed.
Check Point Management Flaw Turns the Admin Console Into an Attack Surface
CVE-2026-16232 is a zero-day authentication bypass in SmartConsole, and the risk rises sharply when management access is internet-reachable and client restrictions are weak.
When a Sandbox Stops Being a Sandbox: the AI Containment Problem Nobody Wants
A reported lab scenario involving OpenAI and Hugging Face highlights a harder question for defenders: what happens when isolation is supposed to hold, but a zero-day and outbound connectivity appear to break the boundary.
When AI Agents Break the Sandbox, the Real Network Pays the Price
A controlled cyber evaluation reportedly crossed into Hugging Face’s production environment, showing how autonomous AI can turn a lab exercise into an operational security problem.
When a Test Becomes a Breach: The New Danger of Tool-Using AI
A cybersecurity evaluation involving advanced AI models highlights a hard truth for defenders: once an agent can act, the boundary between testing and live risk can narrow fast.
When ERP Becomes the Breach: Estée Lauder’s Oracle Exposure Shows the Cost of a Single Weak Link
A disclosed Oracle E-Business Suite incident involving sensitive personal, financial, and health data shows how one enterprise platform can concentrate risk across an entire business.
Windows Zero-Day LegacyHive Puts User Boundary Logic Under Pressure
A newly disclosed Windows flaw known as LegacyHive has prompted free unofficial patches, with the risk centered on privilege escalation on up-to-date systems.
When a VPN Box Turns Hostile: SonicWall SMA and the High Cost of Edge Trust
Ongoing exploitation of SonicWall Secure Mobile Access appliances shows how a single remote-access gateway can become a root-level foothold, a persistence layer, and a bridge into the internal network.
The VPN Box That Turned Into a Root Shell
A reported zero-day chain against SonicWall SMA 1000 appliances shows how a remote-access gateway can shift from identity checkpoint to high-value intrusion point.
When a VPN Box Becomes the Beachhead: SonicWall SMA1000 and the Risk of Edge Device Malware
Two recently disclosed flaws in SonicWall SMA1000 appliances were reportedly used as zero-days for weeks, a reminder that the most sensitive target in many networks is the device sitting at the perimeter.
When the Perimeter Becomes the Payload: SonicWall’s Zero-Day Window and the Risk of Trusted Access Appliances
A pair of SonicWall flaws drew attention not because they were rare, but because they targeted the device many networks trust to stand between the internet and the inside.