Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A new zero-day vulnerability in Apple's WebKit, identified as CVE-2025-14174, has been confirmed and is actively being exploited. This follows the recent disclosure of another critical zero-day vulnerability in Gladinet’s Triofox, CVE-2025-12480. The ongoing exploitation of these vulnerabilities hig...
Google and Apple released urgent security updates to address zero-day vulnerabilities affecting their platforms. The vulnerabilities were exploited in a sophisticated attack targeting specific users, with one bug actively exploited before a patch was available. Apple identified two zero-day flaws tr...
The Google Threat Intelligence Group has identified DarkSword, a full-chain iOS exploit affecting versions 18.4 to 18.7. This exploit leverages multiple zero-day vulnerabilities, including CVE-2025-31277 and CVE-2025-14174, to compromise devices and deploy malware families like GHOSTBLADE. DarkSword...
Trellix's SecondSight Threat Hunting Report details five significant cyber campaigns from the first half of 2026, including APT28 and the Axios npm supply chain attack. Attackers exploited trusted infrastructures and employed advanced evasion techniques, such as using compromised government accounts...
