Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

zerodayinitiative.com

Zero Day Initiative - Blog

Get the latest updates from Zero Day Initiative - Blog directly as they happen.

Follow now 181 followers

Latest posts

Last updated 12 days ago

The October 2024 Security Update Review

12 days ago

It’s the spooky season, and there’s nothing spookier than security patches –...

From Pwn2Own Automotive: More Autel Maxicharger Vulnerabilities

17 days ago

This blog post highlights two additional vulnerabilities in the Autel Maxicharger that...

Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor

24 days ago

As you may know, I recently presented my Exchange-related talk during OffensiveCon...

Announcing Pwn2Own Automotive for 2025

26 days ago

If you just want to read the rules, you can find them...

Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE

about 1 month ago

As you may know, I recently presented my Exchange-related talk during OffensiveCon...

Exploiting Exchange PowerShell After ProxyNotShell: Part 2 - ApprovedApplicationCollection

about 1 month ago

As you may know, I recently presented my Exchange-related talk during OffensiveCon...

The September 2024 Security Update Review

about 1 month ago

We’ve reached September and the pumpkin spice floats in the air. While...

Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty

about 1 month ago

As you may know, I recently presented my Exchange-related talk during OffensiveCon...

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks (Archive)

about 2 months ago

This version of the blog is preserved for archival purposes only. An...

CVE-2024-37079: VMware vCenter Server Integer Underflow Code Execution Vulnerability

about 2 months ago

In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report...

From Pwn2Own Automotive: Taking Over the Autel Maxicharger

about 2 months ago

This blog highlights two vulnerabilities that were disclosed by researchers from Synacktiv...

CVE-2024-38213: Copy2Pwn Exploit Evades Windows Web Protections

2 months ago

Zero Day Initiative threat researchers discovered CVE-2024-38213, a simple and effective way...