Latest Zero-Day news

Thirty-six days of zero-day access. Interlock ransomware hit Cisco Firewall Management Center via CVE-2026-20131 (CVSS 10.0) before anyone knew the flaw existed. A misconfigured server exposed their entire toolkit. CISA gave agencies three days to patch.

Six vulnerabilities, three zero-days, full kernel control. The DarkSword iOS exploit chain has been used by a spyware vendor, a surveillance customer, and suspected Russian spies across four countries since November 2025. Update to iOS 26.3.1.