Operation Aurora: how China hacked Google in 2010
In 2010, hackers linked to the Chinese government breached Google, Adobe and 30+ companies using an IE6 zero-day. Here's …
Zero-Day 8 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Mega Patch Tuesday: Microsoft fixes 3 zero-days
With 622 security fixes, the July 2026 Patch Tuesday is historic. Here are the 3 zero-days that demand an immediate …
What was Stuxnet? The worm that destroyed 1,000 centrifuges
In 2010, Stuxnet showed that code can destroy real hardware: the US-Israeli worm damaged around 1,000 Iranian nuclear …
ShinyHunters exploits Oracle PeopleSoft zero-day, 100+ victims
ShinyHunters exploited CVE-2026-35273, a CVSS 9.8 zero-day in Oracle PeopleSoft, to breach 100+ organisations before a …
CVE-2026-50751: Qilin exploits a Check Point VPN zero-day
Qilin ransomware exploited CVE-2026-50751 in Check Point VPN for 31 days before the patch. The IKEv1 zero-day bypasses …
MOVEit: 3 years on from the zero-day that exposed 93 million records
On 31 May 2023, CVE-2023-34362 in MOVEit Transfer became the largest supply chain attack by SQL injection in history, …
CVE-2026-42897: Exchange OWA zero-day exploited with no patch
Opening an email in Exchange OWA can compromise your authenticated session. CVE-2026-42897 is active with no permanent …
YellowKey: the zero-day that bypasses BitLocker on Windows
CVE-2026-45585 grants access to BitLocker-protected drives with brief physical access. Here is how the attack works and …