Trend Micro researchers discovered and reported the eight-year-old defect to Microsoft six months ago. The company hasn’t made any commitments to patch or remediate the issue.

More than three-quarters of the vulnerabilities covered in the vendor’s monthly Patch Tuesday update are high-severity flaws.

The Vietnam-based group has grown more sophisticated since 2013, new research shows.

The November security bulletin includes two CVE's reportedly exploited in the wild.

An updated emergency directive includes instructions on how to bring affected devices back online securely.

Michael Duffy, associate director for capacity building in CISA’s cybersecurity division, says that global zero-day exploits are “really affecting the federal government networks.”

Google says it has deployed patches for zero-day vulnerabilities that a Spanish tech company may have used to develop spyware.

2021 accounted for more than 40% of the zero-day exploits undertaken in the last decade, according to the company.

There were 58 total. The good news: Detection and disclosure of zero-day exploits have increased, the research team says.

Five zero-days found in Aethon TUG robots included one that could allow an attacker to control the machines, Cynerio said.