The Wire

CRITICALHackers Exploit Critical WSO2 API Manager JWT Flaw Using Forged Admin Tokens CRITICALKREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens FILEDIran-Linked Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists CRITICALNintendo Switch Vulnerability Lets Nearby Attackers Run Unauthorized Code via QR Code Feature FILEDUK Government Begins Moving 23 Million Users Away From Passwords With Passkeys CRITICALChina-Linked Hackers Chain Chrome and Windows Zero-Days to Deploy GRIMWEDGE Backdoor FILEDTelegram Desktop Flaw Lets Hidden JavaScript Steal Messages From HTML Chat Exports FILEDMalicious Twitch Extension Exposes OAuth Tokens of More Than 30,000 Users CRITICALHackers Exploit Critical WSO2 API Manager JWT Flaw Using Forged Admin Tokens CRITICALKREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens FILEDIran-Linked Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists CRITICALNintendo Switch Vulnerability Lets Nearby Attackers Run Unauthorized Code via QR Code Feature FILEDUK Government Begins Moving 23 Million Users Away From Passwords With Passkeys CRITICALChina-Linked Hackers Chain Chrome and Windows Zero-Days to Deploy GRIMWEDGE Backdoor FILEDTelegram Desktop Flaw Lets Hidden JavaScript Steal Messages From HTML Chat Exports FILEDMalicious Twitch Extension Exposes OAuth Tokens of More Than 30,000 Users

Tag

Zero-Click

Every report filed under this tag.

critical Vulnerabilities

WeChat Zero-Click Worm Could Hijack iPhone and Android Accounts Through Incoming Calls

Security researchers have demonstrated a highly dangerous zero-click attack against WeChat that can take over user accounts through an incoming call—without requiring the victim to answer the call, tap a button, or interact with their device.

Zentrya One Desk 09 Sept 2026 8 min read

The Daily Brief

Stay informed. Stay prepared. Stay one step ahead.

One brief each morning: the advisories that matter, the noise removed.

Double opt-in. One-click unsubscribe in every email. We never sell addresses.