Zero-day vulnerabilities are being discovered and exploited across major software platforms at an accelerating pace, with AI tools now scanning for these flaws, researchers releasing exploit code publicly, and companies clashing over responsible disclosure practices.
·AI-powered vulnerability scanners are identifying zero-days in widely-used libraries like Anthropic's buffa, enabling faster detection of memory-amplification DoS attacks
·Cisco's SD-WAN platform and Oracle systems are actively being exploited in the wild via recently-disclosed zero-day CVE-2026-20245 and related attacks
·Nissan and other enterprises suffering data breaches through zero-day exploits tied to major vendor software flaws
·Governments mandating disclosure of zero-day findings to central authorities, with China requiring researchers to report exploits to Beijing
·Tension escalating between tech companies and security researchers over disclosure timelines, with GitHub bans and accusations of retaliation over public exploit releases
drawn from Endor Labs, BleepingComputer, The Register, Tech Times · updated 2d ago