ZeroDay Findings
Sign inSign up

Every 24 hours

Tech News

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Oct 14, 2026

    Critical Authentication Bypass Flaw in Ivanti Connect Secure Exploited by Hackers

    A significant security vulnerability in Ivanti Connect Secure has been exploited by hackers, allowing unauthorized access to systems without requiring legitimate user accounts. This authentication bypass flaw, tracked as CVE-2026-104935, was initially identified by Ivanti as part of their product security program and was patched in the July release 25.1.3.0. However, exploitation occurred before the vendor could backport the fix to all supported versions. The flaw enables attackers to spoof user identity signals, bypassing standard authentication checks entirely, which poses a severe risk for organizations utilizing affected versions of the software.

    What changed

    The vulnerability has a CVSS score of 8.6 out of 10, indicating a high level of severity. It impacts various product branches, including multiple releases of Ivanti Connect Secure, specifically versions 22.8R2.4 and earlier, along with certain 25.1 releases. Notably, versions 22.7 and earlier are not impacted. In response to the threat, Ivanti has released patches for several versions, including 22.8R2.5 and various 25.1 releases, urging security teams to assess their deployed versions and apply the necessary fixes.

    Who is affected

    Organizations are advised to investigate potential compromises as they implement the fixes, although reliable indicators of compromise are still being developed. The urgency of this situation is underscored by the fact that attackers were able to execute arbitrary commands on the appliances once they gained access. Security teams are now on high alert, and the incident highlights the critical need for companies to maintain up-to-date security measures and monitor their systems for unusual activities.

    What it means

    The exploitation of this vulnerability serves as a stark reminder of the importance of swift patch management and the potential consequences of security oversights. As cybersecurity threats continue to evolve, organizations must remain vigilant and proactive in safeguarding their networks against similar vulnerabilities.

  2. Oct 14, 2026

    New Android Malware Hirudo Poses Threat to Banking Security

    A newly discovered Android malware named Hirudo is raising significant concerns among cybersecurity experts and banking institutions. This malware operates by replacing legitimate banking applications with altered versions that circumvent established security measures. By doing so, Hirudo effectively steals users' bank account credentials without triggering typical security alerts, making it particularly dangerous for individuals who rely on mobile banking services.

    What changed

    The impact of Hirudo is far-reaching, as it targets users who may be unaware of the malware's presence on their devices. This stealthy approach allows the malware to operate undetected, leading to potential financial losses for unsuspecting victims. As mobile banking becomes increasingly popular, the risk associated with such malware is amplified, especially for individuals who may not have robust security protocols in place.

    Who is affected

    Cybersecurity professionals are urging users to remain vigilant and employ additional protective measures, such as two-factor authentication and regular updates to their devices. Furthermore, financial institutions are advised to enhance their security frameworks to counteract the sophisticated tactics employed by Hirudo. This includes monitoring for unusual account activity and educating customers about the risks of downloading applications from unverified sources.

    What it means

    As the digital landscape evolves, so too do the threats that accompany it. Malware like Hirudo highlights the need for ongoing vigilance in the realm of mobile security. Users must be proactive in safeguarding their personal information and financial assets, while organizations must continually adapt to the changing tactics of cybercriminals to ensure the safety of their customers.