Tag: zero day
-
Read more: CVE Weaponization: From Disclosure to Live Exploitation
CVE Weaponization: From Disclosure to Live Exploitation
From disclosure to exploit kit: how a small slice of CVEs get weaponized fast, why PoCs matter, and how defenders can cut the window.
-
Read more: Apple Zero-Day, Chaos Ransomware, and Salt Typhoon Breach
Apple Zero-Day, Chaos Ransomware, and Salt Typhoon Breach
August 25, 2025: Apple and Microsoft zero-days, ransomware pivots, and nation-state ops escalate. Critical infra and enterprises at peak exposure.
-
Read more: [CVE-2025-43300] Apple ImageIO Zero-Click Exploited Against Journalists and Officials
![[CVE-2025-43300] Apple ImageIO Zero-Click Exploited Against Journalists and Officials](https://noorstream.com/wp-content/uploads/2025/08/noorstream-zero-click-journalist.png)
[CVE-2025-43300] Apple ImageIO Zero-Click Exploited Against Journalists and Officials
CVE-2025-43300 exploited in Apple zero-click attacks. Italian journalists confirmed targeted; officials at risk.
-
Read more: CVE-2025-8088 – WinRAR Path Traversal Exploit
CVE-2025-8088 – WinRAR Path Traversal Exploit
CVE-2025-8088 is a high-severity path traversal flaw in WinRAR for Windows. Exploited as a zero-day by Russian APT groups RomCom and Paper Werewolf.
-
Read more: [CVE-2025-22457] Ivanti VPN Stack-Based Buffer Overflow Enables Unauthenticated RCE
![[CVE-2025-22457] Ivanti VPN Stack-Based Buffer Overflow Enables Unauthenticated RCE](https://noorstream.com/wp-content/uploads/2025/08/noorstream-china-nexus.png)
[CVE-2025-22457] Ivanti VPN Stack-Based Buffer Overflow Enables Unauthenticated RCE
Critical Ivanti VPN buffer overflow (CVE-2025-22457) exploited by UNC5221 for RCE.
-
Read more: The Exploit Economy: How Zero-Days Are Bought, Sold, and Weaponized
The Exploit Economy: How Zero-Days Are Bought, Sold, and Weaponized
Insightful analysis of the 2023–2025 zero‑day exploit market: pricing trends, key actors, case studies and defensive strategies for enterprises and policymakers.