InfoSecBulletin Cybersecurity for mankind
A recent study found a vulnerability in major internet browsers that has existed for 18 years. This vulnerability makes private and corporate networks open to cyberattacks. Researchers from Oligo Security discovered that hackers can take advantage of how browsers handle requests to the IP address 0.0.0.0 by redirecting them to private servers like “localhost.”
The “0.0.0.0 Day” vulnerability involves tricking people into visiting harmful websites. These websites send hidden requests using the IP address 0.0.0.0. This can give hackers access to private data and internal messages of developers. Even more concerning, it can allow hackers to enter victims’ internal networks, making them vulnerable to various types of attacks.
Daily Cyber security update for 14.11. 2026
Huge European telecom leak exposes clients of Swedbank, SEB, airBaltic, and other companies
PHP2Shell attack exploited a Check Point 0-day to deploy malware
North Korean hackers steal more than $400 million using video images, FBI says
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
Both individuals and companies that host web servers are vulnerable to potential risks. Researchers have shown that it is possible to execute harmful code on servers using the Ray AI framework. However, this issue applies to any application that can be accessed through the IP address 0.0.0.0.
In June, Google’s security developer found malware abusing this vulnerability. But, Windows users don’t need to worry because Microsoft automatically blocks 0.0.0.0. Apple will block access to 0.0.0.0 in macOS 15 Sequoia beta. Google may do the same for Chromium and Chrome. However, Mozilla is unsure due to compatibility concerns with servers that use 0.0.0.0.
Tech giants are increasingly focusing on cybersecurity. However, researchers warn that leaving the IP address 0.0.0.0 open could pose a significant risk, as it may expose previously protected data.
The findings will be presented at the DEF CON conference in Las Vegas this weekend, providing more information about this important security issue. Stay tuned for updates and strategies to fix this vulnerability.
