Tag: zero-day
-
Zero-day exploits swelled in 2023: Mandiant
First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/zero-day-exploits-rise-mandiant/730265/
-
Google Warns of Samsung Zero-Day Exploited in the Wild
A zero-day vulnerability in Samsung mobile processors has been abused as part of an exploit chain for arbitrary code execution. The post Google Warns … First seen on securityweek.com Jump to article: www.securityweek.com/google-warns-of-samsung-zero-day-exploited-in-the-wild/
-
Serious Adversaries Circle Ivanti CSA Zero-Day Flaws
Suspected nation-state actors are spotted stringing together three different zero-days in the Ivanti Cloud Services Application to gain persistent acc… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/serious-adversaries-circle-ivanti-csa-flaws
-
Researchers Debut AI Tool That Helps Detect Zero-Days
Vulnerability Tool Detected Flaws in OpenAI and Nvidia APIs Used in GitHub Projects. Security researchers have developed an AI tool that can detect re… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/researchers-debut-ai-tool-that-helps-detect-zero-days-a-26575
-
North Korea-linked APT37 exploited IE zero-day in a recent attack
Tags: attack, exploit, group, Internet, korea, north-korea, supply-chain, threat, vulnerability, zero-dayNorth Korea-linked group APT37 exploited an Internet Explorer zero-day vulnerability in a supply chain attack. A North Korea-linked threat actor, trac… First seen on securityaffairs.com Jump to article: securityaffairs.com/169983/apt/north-korea-apt37-ie-zero-day.html
-
Hackers targeted Android users by exploiting zero-day bug in Qualcomm chips
First seen on techcrunch.com Jump to article: techcrunch.com/2024/10/09/hackers-were-targeting-android-users-with-qualcomm-zero-day/
-
North Korean Hackers Exploit Zero-Day Flaw (CVE-2024-38178) in >>Operation Code on Toast<<
A joint report by AhnLab Security Emergency response Center (ASEC) and the National Cyber Security Center (NCSC) has revealed a new zero-day vulnerabi… First seen on securityonline.info Jump to article: securityonline.info/north-korean-hackers-exploit-zero-day-flaw-cve-2024-38178-in-operation-code-on-toast/
-
Android-Geräte in Gefahr: Zero-Day-Lücke in Qualcomm-Chips wird aktiv ausgenutzt
First seen on golem.de Jump to article: www.golem.de/news/android-geraete-in-gefahr-zero-day-luecke-in-qualcomm-chips-wird-aktiv-ausgenutzt-2410-189708.html
-
Firefox Zero-Day Under Attack: Update Your Browser Immediately
Mozilla has revealed that a critical security flaw impacting Firefox and Firefox Extended Support Release (ESR) has come under active exploitation in … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/mozilla-warns-of-active-exploitation-in.html
-
Critical Mozilla Firefox Zero-Day Allows Code Execution
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/critical-mozilla-firefox-zero-day-code-execution
-
North Korean APT Exploited IE Zero-Day in Supply Chain Attack
A Pyongyang-aligned APT was caught exploiting a recent zero-day in Internet Explorer in a supply chain attack. The post North Korean APT Exploited IE … First seen on securityweek.com Jump to article: www.securityweek.com/north-korean-apt-exploited-ie-zero-day-in-supply-chain-attack/
-
64 betroffene Chipsätze in Millionen von Geräte Day-Schwachstelle in Qualcomm-Prozessoren
First seen on security-insider.de Jump to article: www.security-insider.de/qualcomm-bestaetigt-behebt-zero-day-schwachstelle-mobilen-prozessoren-a-256ed4b1e8ca9ecfe268378879f3e0e8/
-
Windows Zero-Day Leveraged for ROKRat Malware Delivery
First seen on scworld.com Jump to article: www.scworld.com/brief/windows-zero-day-leveraged-for-rokrat-malware-delivery
-
Zero-days account for most exploited bugs last year
First seen on scworld.com Jump to article: www.scworld.com/brief/zero-days-account-for-most-exploited-bugs-last-year
-
Zero-Days Account for Most Exploited Bugs in 2023
First seen on scworld.com Jump to article: www.scworld.com/brief/zero-days-account-for-most-exploited-bugs-in-2023
-
70% of exploited flaws disclosed in 2023 were zero-days
Mandiant security analysts warn of a worrying new trend of threat actors demonstrating a better capability to discover and exploit zero-day vulnerabil… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-70-percent-of-exploited-flaws-disclosed-in-2023-were-zero-days/
-
Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited
Ivanti has warned that three new security vulnerabilities impacting its Cloud Service Appliance (CSA) have come under active exploitation in the wild…. First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/zero-day-alert-three-critical-ivanti.html
-
Malicious ads exploited Internet Explorer zero day to drop malware
The North Korean hacking group ScarCruft launched a large-scale attack in May that leveraged an Internet Explorer zero-day flaw to infect targets with… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-ads-exploited-internet-explorer-zero-day-to-drop-malware/
-
Firefox 131 Update Patches Exploited Zero-Day Vulnerability
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36458/Firefox-131-Update-Patches-Exploited-Zero-Day-Vulnerability.html
-
Windows spoofing flaw exploited in earlier zero-day attacks
Microsoft reveals that CVE-2024-43461, which was disclosed in September’s Patch Tuesday, was previously exploited as a zero-day vulnerability in an at… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366610775/Windows-spoofing-flaw-exploited-in-earlier-zero-day-attacks
-
Zero-day Flaws Exposed EV Chargers to Shutdowns and Data Theft
First seen on hackread.com Jump to article: hackread.com/zero-day-flaws-ev-chargers-to-shutdowns-data-theft/
-
Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score
First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/microsoft-patch-tuesday-september-2024/
-
Nation-state actor exploited three Ivanti CSA zero-days
An alleged nation-state actor exploited three zero-day vulnerabilities in Ivanti Cloud Service Appliance (CSA) in recent attacks. Fortinet FortiGuard … First seen on securityaffairs.com Jump to article: securityaffairs.com/169778/apt/ivanti-cloud-service-appliance-three-zero.html
-
5 Zero-Days in Microsoft’s October Update to Patch Immediately
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/5-cves-microsofts-october-2024-update-patch-now
-
Microsoft Confirms Exploited Zero-Day In Windows Management Console
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36450/Microsoft-Confirms-Exploited-Zero-Day-In-Windows-Management-Console.html
-
Week in review: Microsoft fixes two exploited zero-days, SOC teams are losing trust in security tools
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft patches two zero-days exploited in the wil… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/13/week-in-review-microsoft-fixes-two-exploited-zero-days-soc-teams-are-losing-trust-in-security-tools/
-
Chinese State Hackers Main Suspect in Recent Ivanti CSA Zero-Day Attacks
Fortinet believes state-sponsored threat actors are behind the recent attacks involving exploitation of Ivanti CSA zero-days. The post Chinese State H… First seen on securityweek.com Jump to article: www.securityweek.com/ivanti-csa-zero-day-exploitation-attributed-to-state-sponsored-hackers/
-
Trio of Ivanti CSA zero-day vulnerabilities under exploit threat
First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ivanti-zero-day-vulnerabilities-exploitation/729354/
-
Microsoft adressiert Zero-Day-Schwachstellen
First seen on csoonline.com Jump to article: www.csoonline.com/de/a/microsoft-adressiert-zero-day-schwachstellen