ZeroDay Findings
Sign inSign up

Every 24 hours

Tech News

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Sep 30, 2026

    AI's Impact on Vulnerability Discovery and Exploitation Trends

    A recent analysis has revealed significant changes in the landscape of vulnerability discovery and exploitation, largely attributed to advancements in artificial intelligence (AI). The report indicates that the rate of vulnerability disclosures has surged dramatically, with the number of reported vulnerabilities per month doubling from 5,045 in January 2026 to 10,740 by August 2026. This rapid increase underscores a growing concern for organizations that rely on technology to manage their operations.

    What changed

    Alongside the rise in disclosures, the report highlights a nearly equivalent increase in the exploitation of these vulnerabilities. The average number of exploited vulnerabilities per month rose from 10.5 in 2025 to 18 in the first eight months of 2026. Notably, the exploitation of zero-day vulnerabilities has also seen a slight uptick, indicating a heightened risk for organizations that may not have timely patches or defenses in place.

    The findings further indicate that AI tools are not only accelerating the discovery process but are also identifying vulnerabilities with more serious implications. There has been a notable shift in the types of vulnerabilities being discovered, with a decrease in low-risk vulnerabilities and an increase in moderate-risk vulnerabilities, particularly those that could lead to remote code execution (RCE). This evolution poses significant challenges for cybersecurity teams, who must adapt to a more complex threat landscape.

    Who is affected

    As the trend of increased vulnerability discovery and exploitation continues, organizations are urged to enhance their cybersecurity strategies. The analysis emphasizes the need for proactive measures, including robust incident response plans and continuous monitoring of vulnerabilities. Companies must prioritize risk management and invest in AI-driven security solutions to keep pace with the evolving threats.

    In conclusion, the intersection of AI and cybersecurity is reshaping the way vulnerabilities are discovered and exploited. Organizations must remain vigilant and responsive to these changes to safeguard their digital assets and maintain operational integrity in an increasingly perilous environment.

  2. Sep 28, 2026

    Dutch Police Arrest Suspected Associate of ShinyHunters Amid Escalating Cyber Attacks

    In a significant move against cybercrime, Dutch authorities have apprehended a 23-year-old individual previously convicted for hacking offenses, who is suspected of providing assistance to the notorious hacker group known as ShinyHunters. This arrest is part of a broader investigation aimed at dismantling the group's operations, which have been linked to various high-profile data thefts and extortion schemes.

    What changed

    The timing of the arrest has raised alarms, as it coincided with a notable increase in the group's activities. Following the detention of the suspect, ShinyHunters intensified their cyber operations, reportedly breaching sensitive databases and stealing classified information from the FBI. This escalation highlights the group's resilience and adaptability in the face of law enforcement actions.

    Who is affected

    The implications of these developments are far-reaching. Organizations and individuals whose data may have been compromised are now at heightened risk of extortion and further attacks. The stolen information can potentially lead to identity theft, privacy violations, and significant financial losses for those affected.

    What it means

    Moreover, the arrest underscores the ongoing challenges faced by law enforcement in combating cybercrime. Despite efforts to apprehend key figures in these networks, the swift retaliation by remaining group members illustrates the need for continuous vigilance and enhanced security measures. As cyber threats evolve, so too must the strategies employed by authorities to protect sensitive information and maintain public trust in digital systems.