Zero-Day Chaos: Zoom Flaw Exposed and Microsoft Patches 398 Vulnerabilities

This week was marked by a surge in zero-day vulnerabilities and attacks on various platforms. A Zoom zero-click flaw allowed meeting participants to take over devices without user interaction, while ShieldBreak's zero-day bypassed a Windows Defender patch to gain SYSTEM-level access.

The Patch Tuesday update from Microsoft fixed 398 Windows flaws, including an actively exploited WinSock zero-day. CISA also warned of an actively exploited Metabase flaw enabling admin account takeover. Meanwhile, the Aeternum botnet used Polygon blockchain smart contracts for takedown-resistant command-and-control addresses.