7-Zip: RCE vulnerability in archive parser - update now
A critical vulnerability in 7-Zip allows remote code execution via a booby-trapped archive. The patch is available; given the installed base, the urgency is real.
7 h ago 2 1
LegacyHive: the new "OS-breaking" 0-day announced fizzles out
The "serial tormentor" of Microsoft, known for its spectacular 0-days, has released LegacyHive. Researchers' verdict: useful in post-compromise scenarios, far from the devastating vulnerability promised.
yesterday 5 2
CISA sounds the alarm: three SharePoint vulnerabilities actively exploited
The CISA adds three SharePoint vulnerabilities to its KEV catalog - confirmed exploitation in the wild. Two other critical flaws remain on the table. What to patch, and quickly.
yesterday 18 3