A security flaw that attackers know about, and often already use, before the software's maker has released a fix: the maker has had zero days to respond.
Organisations running exposed Connect Secure gateways face a backlog of unknown size, since fixes exist but how many devices have been secured is not known.
Targets include telecoms, government agencies and critical infrastructure, with California, Texas and Hawaii hit most often.
Owners of iPhone XS, XS Max and XR, and several older iPads, can now receive the patch for an exploited flaw that can run code from a crafted file.
Devices on older releases also receive patches, including a zero-day Apple says was used in an extremely sophisticated attack.
The update also closes three zero-days and marks the last security update for Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016.
The flaw can let unauthenticated attackers run commands on affected appliances, and fixed Connect Secure builds are now available.
Ikotas Labs won the contest, while payouts climbed across all three days as teams found more flaws.
Day one showed vendors how fast fresh flaws can be turned into working attacks when researchers line up against real products.
The updates close a high-severity NetScaler bug that attackers were already using, forcing affected agencies and users to move quickly.
The breach cut across Bitget’s wallet operations, forcing it to stop withdrawals while it tries to contain and recover the stolen funds.
DIVD is urging Zammad users to move to version 7 or shut affected instances down while the two flaws are fixed.
CISA has added the bug to its exploited-vulnerability list, putting exposed FortiMail systems on a tight mitigation clock.
Targeted attacks on specific iOS users push Apple to ship urgent patches across iOS, iPadOS and macOS.
The company says the shutdown is precautionary, with no known compromise.
Admins of BIG-IP APM and VeloCloud Orchestrator must move quickly as both zero-days are under active attack and already flagged by CISA.
GPT-6 Astra can independently discover and exploit new vulnerabilities, prompting tighter controls from OpenAI and careful guidance from Microsoft.