Zero-day vulnerabilities5 stories

1. October 6
   Researchers exploit 32 zero-days at Pwn2Own Ireland opening day Security researchers earned $388,500 on the first day of the 2026 competition. BC Security 2 sources
2. October 4
   Citrix discloses a third exploited NetScaler zero-day within a week According to The Record, Citrix confirmed late Friday that it was tracking an issue affecting some customer-managed NetScaler deployments and said it was unrelated to vulnerabilities reported the previous week. CS Security 2 sources
3. October 2
   Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware Warlock has targeted a water utility, a telecom provider, a regional government body and a university by exploiting SharePoint vulnerabilities to gain initial access. THN Security 3 sources
4. September 30
   AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds The Dutch Institute for Vulnerability Disclosure was breached through two Zammad zero-day flaws, according to Security Affairs, with an AI agent reaching root within seconds. SAF Security 3 sources
5. September 30
   Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager Cisco said in a September 30 advisory that attackers are exploiting a critical zero-day flaw in Catalyst SD-WAN Manager, tracked as CVE-2026-76504, according to The Hacker News. THN Security 2 sources