Cybersecurity news about “Zero-day”.
Attackers drained $387.5 million from Bitget's hot wallets on September 24 by abusing zero-days in third-party security appliances. The exchange suspects North Korean hackers.
Fortinet disclosed an actively exploited FortiMail flaw rated 9.8 that lets unauthenticated attackers write arbitrary files; CISA added it to KEV with an October 4 deadline.
Cisco warned that attackers are exploiting a critical authentication bypass in Catalyst SD-WAN Manager that grants admin access; CISA ordered federal agencies to patch by 3 October.
