Operation Aurora: the 2010 attack that hit Google
Learn how Operation Aurora used an Internet Explorer 6 zero-day to target Google, Adobe, and more than 30 companies in …
Zero-Day 8 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Mega Patch Tuesday: Microsoft fixes 3 zero-days
With 622 security fixes, the July 2026 Patch Tuesday is historic. Here are the 3 zero-days that demand an immediate …
What was Stuxnet? The worm that destroyed 1,000 centrifuges
In 2010, Stuxnet showed that code can destroy real hardware: the US-Israeli worm damaged around 1,000 Iranian nuclear …
ShinyHunters exploits Oracle PeopleSoft zero-day, 100+ victims
ShinyHunters exploited CVE-2026-35273, a CVSS 9.8 zero-day in Oracle PeopleSoft, to breach 100+ organisations before a …
CVE-2026-50751: Qilin exploits a Check Point VPN zero-day
Qilin ransomware exploited CVE-2026-50751 in Check Point VPN for 31 days before the patch. The IKEv1 zero-day bypasses …
MOVEit: 3 years on from the zero-day that exposed 93 million records
On 31 May 2023, CVE-2023-34362 in MOVEit Transfer became the largest supply chain attack by SQL injection in history, …
CVE-2026-42897: Exchange OWA zero-day exploited with no patch
Opening an email in Exchange OWA can compromise your authenticated session. CVE-2026-42897 is active with no permanent …
YellowKey: the zero-day that bypasses BitLocker on Windows
CVE-2026-45585 grants access to BitLocker-protected drives with brief physical access. Here is how the attack works and …