Date Author Title

MACOS IOS 26 0DAY

2026-09-28Johannes UllrichApple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950)

MACOS

2026-09-28/a>Johannes UllrichApple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950)
2026-09-25/a>Brad DuncanA Closer Look at Malware From the Macfinger ClickFix Campaign
2026-09-22/a>Brad DuncanMacfinger ClickFix campaign
2026-09-15/a>Johannes UllrichMacOS 27 - First Boot
2026-09-14/a>Johannes UllrichApple Updates Everything
2026-08-17/a>Johannes UllrichApple Screen Sharing Security
2026-08-17/a>Johannes UllrichApple Patches iOS and macOS
2026-08-02/a>Brad DuncanAtomic MacOS (AMOS) stealer infection
2026-07-29/a>Johannes UllrichApple Patches Everything (July 2026)
2026-06-30/a>Johannes UllrichJune 2026 Apple Updates
2026-03-25/a>Johannes UllrichApple Patches (almost) everything again. March 2026 edition.
2025-09-15/a>Johannes UllrichApple Updates Everything - iOS/macOS 26 Edition
2025-07-29/a>Johannes UllrichApple Updates Everything: July 2025
2025-05-12/a>Johannes UllrichApple Updates Everything: May 2025 Edition
2025-03-31/a>Johannes UllrichApple Patches Everything: March 31st 2025 Edition
2025-03-11/a>Johannes UllrichApple Fixes Exploited WebKit Vulnerability in iOS, MacOS, visionOS and Safari
2024-12-11/a>Johannes UllrichApple Updates Everything (iOS, iPadOS, macOS, watchOS, tvOS, visionOS)
2024-10-28/a>Johannes UllrichApple Updates Everything
2024-10-07/a>Xavier MertensmacOS Sequoia: System/Network Admins, Hold On!
2024-07-30/a>Johannes UllrichApple Patches Everything. July 2024 Edition
2024-01-22/a>Johannes UllrichApple Updates Everything - New 0 Day in WebKit
2024-01-19/a>Xavier MertensmacOS Python Script Replacing Wallet Applications with Rogue Apps
2023-12-11/a>Johannes UllrichApple Patches Everything
2023-09-26/a>Johannes UllrichApple Releases MacOS Sonoma Including Numerous Security Patches
2023-09-11/a>Johannes UllrichApple fixes 0-Day Vulnerability in Older Operating Systems
2023-09-07/a>Johannes UllrichApple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-08-26/a>Xavier MertensmacOS: Who?s Behind This Network Connection?
2023-06-22/a>Johannes UllrichApple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-04-07/a>Johannes UllrichApple Patching Two 0-Day Vulnerabilities in iOS and macOS
2023-03-27/a>Johannes UllrichApple Updates Everything (including Studio Display)
2022-07-26/a>Xavier MertensHow is Your macOS Security Posture?
2022-07-20/a>Johannes UllrichApple Patches Everything Day
2022-03-31/a>Johannes UllrichApple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS,
2022-03-14/a>Johannes UllrichApple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more
2022-02-10/a>Johannes UllrichiOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2022-01-27/a>Johannes UllrichApple Patches Everything
2020-11-20/a>Xavier MertensMalicious Python Code and LittleSnitch Detection
2020-11-09/a>Xavier MertensHow Attackers Brush Up Their Malicious Scripts
2020-09-09/a>Johannes UllrichA First Look at macOS 11 Big Sur Network Traffic (New! Now with more GREASE!)
2018-11-27/a>Xavier MertensMore obfuscated shell scripts: Fake MacOS Flash update
2018-11-04/a>Pasquale StirparoBeyond good ol' LaunchAgent - part 1
2018-10-21/a>Pasquale StirparoBeyond good ol’ LaunchAgent - part 0
2018-06-29/a>Remco VerhoefCrypto community target of MacOS malware
2014-01-24/a>Chris MohanSecurity Update for OS X for CVE-2014-1252 http://support.apple.com/kb/HT6117
2012-05-05/a>Tony CarothersVulnerability Exploit for Snow Leopard
2010-06-15/a>Manuel Humberto Santander PelaezApple releases advisory for Mac OS X - Multiple vulnerabilities discovered

IOS

2026-09-28/a>Johannes UllrichApple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950)
2026-09-14/a>Johannes UllrichApple Updates Everything
2026-08-17/a>Johannes UllrichApple Patches iOS and macOS
2026-07-29/a>Johannes UllrichApple Patches Everything (July 2026)
2026-06-30/a>Johannes UllrichJune 2026 Apple Updates
2026-05-22/a>Xavier MertensCross-Platform NPM Stealer
2026-04-23/a>Johannes UllrichApple Patches Exploited Notification Flaw
2026-04-01/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows
2026-03-25/a>Johannes UllrichApple Patches (almost) everything again. March 2026 edition.
2025-09-15/a>Johannes UllrichApple Updates Everything - iOS/macOS 26 Edition
2025-07-29/a>Johannes UllrichApple Updates Everything: July 2025
2025-05-12/a>Johannes UllrichApple Updates Everything: May 2025 Edition
2025-03-31/a>Johannes UllrichApple Patches Everything: March 31st 2025 Edition
2025-03-11/a>Johannes UllrichApple Fixes Exploited WebKit Vulnerability in iOS, MacOS, visionOS and Safari
2024-12-11/a>Johannes UllrichApple Updates Everything (iOS, iPadOS, macOS, watchOS, tvOS, visionOS)
2024-10-28/a>Johannes UllrichApple Updates Everything
2024-07-30/a>Johannes UllrichApple Patches Everything. July 2024 Edition
2024-03-05/a>Johannes UllrichApple Releases iOS/iPadOS Updates with Zero Day Fixes.
2024-01-22/a>Johannes UllrichApple Updates Everything - New 0 Day in WebKit
2023-12-11/a>Johannes UllrichApple Patches Everything
2023-10-25/a>Johannes UllrichApple Patches Everything. Releases iOS 17.1, MacOS 14.1 and updates for older versions fixing exploited vulnerability
2023-09-11/a>Johannes UllrichApple fixes 0-Day Vulnerability in Older Operating Systems
2023-09-07/a>Johannes UllrichApple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-06-22/a>Johannes UllrichApple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-04-07/a>Johannes UllrichApple Patching Two 0-Day Vulnerabilities in iOS and macOS
2023-03-27/a>Johannes UllrichApple Updates Everything (including Studio Display)
2023-01-24/a>Johannes UllrichApple Updates (almost) Everything: Patch Overview
2022-11-28/a>Johannes UllrichUkraine Themed Twitter Spam Pushing iOS Scareware
2022-07-20/a>Johannes UllrichApple Patches Everything Day
2022-03-31/a>Johannes UllrichApple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS,
2022-03-14/a>Johannes UllrichApple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more
2022-02-10/a>Johannes UllrichiOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2022-01-27/a>Johannes UllrichApple Patches Everything
2021-09-21/a>Johannes UllrichA First Look at Apple's iOS 15 "Private Relay" feature.
2018-10-08/a>Guy BruneauApple Security Updates
2018-01-23/a>Johannes UllrichApple Updates Everything, Again
2017-08-15/a>Renato Marinho(Banker(GoogleChromeExtension)).targeting("Brazil")
2017-03-18/a>Rick WannerCisco IOS Remote Code Execution Vulnerability -> https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp
2016-09-17/a>Guy BruneauMultiple Cisco Products affected by IKEv1 Vulnerability
2016-08-25/a>Xavier MertensOut-of-Band iOS Patch Fixes 0-Day Vulnerabilities
2016-08-11/a>Pasquale StirparoLooking for the insider: Forensic Artifacts on iOS Messaging App
2015-09-21/a>Xavier MertensDetecting XCodeGhost Activity
2015-06-18/a>Johannes UllrichOS X and iOS Unauthorized Cross Application Resource Access (XARA)
2014-07-01/a>Johannes UllrichApple Releases Patches for All Products
2014-04-24/a>Rob VandenBrinkApple IOS updates to 7.1.1, OSX Security update 2014-002, Airport Updates - http://support.apple.com/kb/HT1222, http://support.apple.com/kb/HT6208, http://support.apple.com/kb/HT6207, http://support.apple.com/kb/HT6203
2014-03-26/a>Johannes UllrichCisco Semiannual IOS Security Advisory http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar14.html
2014-03-10/a>Basil Alawi S.TaherApple iOS 7.1
2014-02-21/a>Jim ClausingApple updates iOS and Apple TV
2013-11-14/a>Johannes UllrichiOS 7.0.4 released. Fixes issue with unauthorized in App purchases http://lists.apple.com/archives/security-announce/2013/Nov/msg00000.html
2013-10-31/a>Russ McReeHappy Halloween: The Ghost Really May Be In The Machine
2013-10-01/a>Johannes UllrichiOS 7 Adds Multipath TCP
2013-09-27/a>Rick WannerIOS 7.0.2 released
2013-09-18/a>Rob VandenBrinkApple IOS 7 - Brace for Impact!
2013-03-27/a>Rob VandenBrinkSeveral Cisco IOS DOS Issues Resolved
2013-01-28/a>Johannes UllrichiOS 6.1 Released
2012-09-27/a>Kevin ShorttCisco IOS Security Advisory Bundle - http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep12.html
2012-08-15/a>Guy BruneauCisco IOS XR Software Route Processor DoS Vulnerability - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr
2012-06-01/a>Johannes UllrichApple Releases iOS Security Specs
2012-05-07/a>Guy BruneauiOS 5.1.1 Software Update for iPod, iPhone, iPad
2012-01-24/a>Bojan ZdrnjaIs it time to get rid of NetBIOS?
2011-07-25/a>Johannes UllrichiOS 4.3.5 released fixing an SSL certificate verification flaw. http://support.apple.com/kb/HT1222
2011-06-26/a>Rick WannerNagios script for ISC threat level http://www.aj-services.com/?p=275
2011-04-14/a>Johannes UllrichApple Security Patches for OS X and iOS
2010-08-13/a>Guy BruneauCisco IOS Software 15.1(2)T TCP DoS
2010-08-02/a>Manuel Humberto Santander PelaezSecuring Windows Internet Kiosk
2010-06-23/a>Johannes UllrichIPv6 Support in iOS 4
2009-11-18/a>Rob VandenBrinkUsing a Cisco Router as a “Remote Collector” for tcpdump or Wireshark
2009-03-25/a>Mari NicholsCisco Releases IOS Bundle of Vulnerabilities
2008-05-23/a>Mike PoorCisco IOS Rootkit thoughts

26

2026-09-28/a>Johannes UllrichApple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950)
2026-05-18/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Activity Through 2026-05-17
2026-05-08/a>Yee Ching TokAnother Universal Linux Local Privilege Escalation (LPE) Vulnerability: Dirty Frag
2026-04-08/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory
2026-04-03/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments
2026-04-01/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows
2026-03-30/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released
2026-03-28/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours
2026-03-27/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim
2026-03-26/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 001 - Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available
2023-02-22/a>Johannes UllrichInternet Wide Scan Fingerprinting Confluence Servers
2022-04-28/a>Johannes UllrichA Day of SMB: What does our SMB/RPC Honeypot see? CVE-2022-26809
2022-04-14/a>Johannes UllrichAn Update on CVE-2022-26809 - MSRPC Vulnerabliity - PATCH NOW
2021-11-20/a>Guy BruneauHikvision Security Cameras Potentially Exposed to Remote Code Execution
2021-02-25/a>Jim ClausingSo where did those Satori attacks come from?
2021-02-16/a>Jim ClausingMore weirdness on TCP port 26
2019-12-02/a>Jim ClausingNext up, what's up with TCP port 26?
2019-02-02/a>Guy BruneauScanning for WebDAV PROPFIND Exploiting CVE-2017-7269
2014-02-27/a>Richard PorterDDoS and BCP 38
2011-04-21/a>Guy BruneauSilverlight Update Available
2010-10-28/a>Manuel Humberto Santander PelaezCVE-2010-3654 - New dangerous 0-day authplay library adobe products vulnerability

0DAY

2026-09-28/a>Johannes UllrichApple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950)
2025-03-11/a>Johannes UllrichApple Fixes Exploited WebKit Vulnerability in iOS, MacOS, visionOS and Safari
2024-03-05/a>Johannes UllrichApple Releases iOS/iPadOS Updates with Zero Day Fixes.
2024-01-22/a>Johannes UllrichApple Updates Everything - New 0 Day in WebKit
2023-09-07/a>Johannes UllrichApple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-06-22/a>Johannes UllrichApple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-04-07/a>Johannes UllrichApple Patching Two 0-Day Vulnerabilities in iOS and macOS
2022-08-17/a>Johannes UllrichApple Patches Two Exploited Vulnerabilities
2022-02-10/a>Johannes UllrichiOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2021-03-03/a>Johannes UllrichMicrosoft Releases Exchange Emergency Patch to Fix Actively Exploited Vulnerability
2018-02-01/a>Johannes UllrichAdobe Flash 0-Day Used Against South Korean Targets
2016-08-25/a>Xavier MertensOut-of-Band iOS Patch Fixes 0-Day Vulnerabilities
2016-04-06/a>Bojan ZdrnjaYAFP (Yet Another Flash Patch)
2015-02-05/a>Johannes UllrichAdobe Flash Player Update Released, Fixing CVE 2015-0313
2015-01-23/a>Adrien de BeaupreInfocon change to yellow for Adobe Flash issues
2014-07-28/a>Johannes UllrichInteresting HTTP User Agent "chroot-apach0day"
2014-05-21/a>John BambenekNew, Unpatched IE 0 Day published at ZDI
2013-08-28/a>Bojan ZdrnjaMS13-056 (false positive)? alerts
2013-05-09/a>John BambenekAdobe Releases 0-day Security Advisory for Coldfusion, Exploit Code Available. Advisory here: http://www.adobe.com/support/security/advisories/apsa13-03.html
2013-02-07/a>John BambenekAdobe Releases Patches for 0-day Vulnerability in Flash Player for Windows and Mac, Upgrade now: http://www.adobe.com/support/security/bulletins/apsb13-04.html
2011-12-29/a>Richard PorterASP.Net Vulnerability
2011-11-16/a>Jason LamPotential 0-day on Bind 9
2011-05-06/a>Richard PorterUnpatched Exploit: Skype for MAC
2010-12-22/a>John BambenekIIS 7.5 0-Day DoS (processing FTP requests)
2010-11-24/a>Bojan ZdrnjaPrivilege escalation 0-day in almost all Windows versions
2010-11-01/a>Manuel Humberto Santander PelaezCVE-2010-3654 exploit in the wild
2010-10-28/a>Manuel Humberto Santander PelaezCVE-2010-3654 - New dangerous 0-day authplay library adobe products vulnerability
2010-10-26/a>Pedro BuenoFirefox news
2010-03-01/a>Mark HofmanIE 0-day using .hlp files
2010-02-09/a>Adrien de BeaupreWhen is a 0day not a 0day? Samba symlink bad default config
2010-01-14/a>Bojan Zdrnja0-day vulnerability in Internet Explorer 6, 7 and 8
2010-01-12/a>Johannes UllrichPre-Announced Adobe Reader and Acrobat Patch Found!
2010-01-07/a>Daniel WesemannStatic analysis of malicious PDFs
2010-01-07/a>Daniel WesemannStatic analysis of malicous PDFs (Part #2)
2009-12-27/a>Patrick NolanPressure increasing for Microsoft to patch IIS 0 day
2009-12-15/a>Johannes UllrichAdobe 0-day in the wild - again
2009-11-22/a>Marcus SachsIE6 and IE7 0-Day Reported
2009-09-08/a>Adrien de BeaupreMicrosoft Security Advisory 975191 Revised
2009-09-04/a>Adrien de BeaupreVulnerabilities (plural) in MS IIS FTP Service 5.0, 5.1. 6.0, 7.0
2009-08-31/a>Pedro BuenoMicrosoft IIS 5/6 FTP 0Day released
2009-07-22/a>Bojan ZdrnjaYA0D (Yet Another 0-Day) in Adobe Flash player
2009-07-17/a>Bojan ZdrnjaA new fascinating Linux kernel vulnerability
2009-04-29/a>Jason LamTwo Adobe 0-day vulnerabilities
2009-03-18/a>Adrien de BeaupreAdobe Security Bulletin Adobe Reader and Acrobat
2009-02-25/a>Andre LudwigAdobe Acrobat pdf 0-day exploit, No JavaScript needed!
2008-12-12/a>Johannes UllrichMSIE 0-day Spreading Via SQL Injection
2008-12-12/a>Kevin ListonIE7 0day expanded to include IE6 and IE8(beta)
2008-12-10/a>Bojan Zdrnja0-day exploit for Internet Explorer in the wild
2006-11-29/a>Toby KohlenbergWeek of Oracle bugs cancelled
2006-09-28/a>Swa FrantzenPowerpoint, yet another new vulnerability
2006-09-28/a>Swa FrantzenMSIE: One patched, one pops up again (setslice)
2006-09-22/a>Swa FrantzenYellow: MSIE VML exploit spreading
2006-09-19/a>Swa FrantzenYet another MSIE 0-day: VML
2006-09-15/a>Swa FrantzenMSIE DirectAnimation ActiveX 0-day update