Cyderes reports that the same actor released four new zero-day targets for CrowdStrike, NVIDIA, Avast, and Kaspersky in the latest public zero-day release since April 2026.
Public source
Publisher name
Public post
For six months, Nightmare-Eclipse targeted one thing: Microsoft Defender. That just changed. The latest string of four new zero-days targets CrowdStrike, NVIDIA, Avast,…
Company
Cyderes
We help the world Be Everyday Ready™
- Industry
- Computer and Network Security
- Location
- Kansas City, US
- Company size
- 501–1,000 employees
About Cyderes
Today’s threatscape is relentless. So are we. At Cyderes, we specialize in building practical Identity & Access Management (IAM), Managed Detection & Response (MDR), Exposure Management, and risk programs to block and stop threats, fast. Our tireless global team is laser-focused on cybersecurity, arming organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.
See moreLatest activity
Latest activity from Cyderes
25 signals
Presence & Recognition
Cyderes hosted an episode of Research Saturday discussing an SEO poisoning campaign by Brian Hussey.
Research & Knowledge
Cyderes published a breakdown of four zero days hitting CrowdStrike, NVIDIA, Avast, and Kaspersky.
Research & Knowledge
Cyderes Field CTO John Ayers breaks down how Meridian pulls existing security tools into a single shared model for identity, exposure, and SecOps.
Discover more
Similar signals
Similar public activity from other companies.
Research & Knowledge
Custodian360
Custodian360 published an unverified proof-of-concept claiming a zero-day privilege escalation in CrowdStrike Falcon Sensor dubbed FalconFlank, which abuses Falcon's Office macro remediation workflow to escalate from a low-privileged local user to SYSTEM.
Research & Knowledge
Safe Security
Safe Security published its latest SAFE Threat Research breakdown covering the CVEs that should move up the remediation queue this week.
Research & Knowledge
Prophaze
Prophaze released its latest Weekly Threat Report breaking down all five critical CVEs from the week, what's actively being exploited, and what to patch first.
Research & Knowledge
Empirical Security
Empirical Security reported that of the 51,219 CVEs published in 2026 that NVD has settled, 20,076 are marked as Deferred.
Research & Knowledge
CrowdStrike