Zero-Day

🟢 Low | Source: The Hacker News This is a webinar announcement featuring HD Moore, creator of Metasploit, focused on network exposure and attack surface visibility rather than reactive patching. The core argument is that with zero-days arriving faster than patches and AI accelerating exploit development, organisations must shift focus to limiting what an attacker can reach once inside. It matters because it reframes security strategy around blast radius reduction rather than the increasingly futile race to patch everything in time. ...

🟡 Medium | Source: The Hacker News This is a webinar featuring HD Moore, creator of Metasploit, focused on shifting security strategy away from reactive patching and towards understanding network exposure and attack paths. The core argument is that zero-days and AI-generated exploits make ‘patch everything in time’ an unrealistic goal. What matters more is controlling what an attacker can reach once they’re inside — a principle of blast radius reduction. ...

🟠 High | Source: The Register — Security A security researcher has publicly leaked Microsoft exploit code in protest at how the company handles vulnerability disclosures, following a similar incident by a researcher known as Nightmare Eclipse. The move bypasses responsible disclosure norms, meaning working exploits are now publicly available before Microsoft has necessarily issued patches. This significantly raises the risk for organisations running unpatched Microsoft and Azure environments. Architect’s Take: Review your Microsoft and Azure patch status immediately and prioritise any outstanding security updates — publicly available exploit code dramatically shortens the window between disclosure and active exploitation. Ensure your vulnerability management process includes alerting on zero-day and pre-patch public exploit releases, not just CVE publication. ...