SecurityOne Week, Nine Flaws, No Easy Fix
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
> Search
8 results for “zero-click”
Security
Cyber CrimePlugin4Shell Exposes AI Coding Agents to RCE
A zero-click remote code execution flaw in popular AI coding agents could let attackers run malicious code without developer interaction, researchers warn.
SecurityWeChat worm exploited before calls answered
Tencent patches zero-click flaw that allowed account takeover via VoIP calls.
Cyber CrimePegasus iMessage Attack Targets Serbian Student Activist
Citizen Lab finds NSO Group spyware on an activist's iPhone via a zero-click exploit, highlighting ongoing surveillance of Serbian civil society.
SecurityZero-click RCE in Avada leaves million sites exposed
A 9.8-rated flaw chain in the Avada WordPress theme lets unauthenticated attackers run PHP code.
SecurityZero-Click Zoom Flaw Hands Over the Room
A flaw in Zoom's annotation tool could let any participant take over a sharer's client — with zero clicks.
SecurityZero-Click Exploits Hit Zimbra Users
A sophisticated campaign by the threat group Laundry Bear has bypassed user interaction to harvest sensitive government data.
SecurityZimbra Security Breach Exposes Critical Zero-Click Email Risks
A severe vulnerability in the Classic Web Client requires immediate patching to prevent unauthorized code execution via email.