0-day

This week's security vulnerabilities include WordPress Remote Code Execution, SonicWall 0-Days, AI service attacks, and a SharePoint 0-Day, leading to code execution, memory loss, stolen keys, and disabled security tools. The issues stemmed from exposed systems, weak checks, old drivers, fake prompts, and public code used for malware delivery.

A critical vulnerability in FortiClient Enterprise Management Server (EMS) was exploited as a 0-day attack, prompting Fortinet to release an emergency patch. CISA added the flaw to its Known Exploited Vulnerabilities (KEV) list after confirming real-world exploitation since March 31.