Tag: zero-day
-
Ivanti EPM SQL Injection Flaw Let Attackers Execute Remote Code
In May 24, 2024, Zero-Day Initiative released a security advisory for Ivanti EPM which was associated with SQL injection Remote code execution vulnera… First seen on gbhackers.com Jump to article: gbhackers.com/ivanti-epm-sql-injection-rce-vulnerability/
-
GenAI keeps cybersecurity pros on high alert
Businesses across every industry face unprecedented challenges posed by an increasing attack surface, zero-day vulnerabilities, cloud misconfiguration… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/13/businesses-ai-threats/
-
Microsoft Patch Tuesday security updates for June 2024 fixed only one critical issue
Microsoft Patch Tuesday security updates for June 2024 addressed 49 vulnerabilities, only one of them is a publicly disclosed zero-day flaw. Microsoft… First seen on securityaffairs.com Jump to article: securityaffairs.com/164442/security/microsoft-patch-tuesday-june-2024.html
-
Surge in Attacks Against Edge and Infrastructure Devices
Increase in Known Vulnerabilities and Zero-Days Is Fueling Mass Hacking Campaigns. Attackers are increasingly targeting cybersecurity devices deployed… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/surge-in-attacks-against-edge-infrastructure-devices-a-25525
-
Google patches exploited Android zero-day on Pixel devices
Google has released patches for 50 security vulnerabilities impacting its Pixel devices and warned that one of them had already been exploited in targ… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-patches-exploited-android-zero-day-on-pixel-devices/
-
Attacks Surge on Check Point’s Recent VPN Zero-Day Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/attacks-surge-on-check-points-recent-vpn-zero-day-flaw
-
Arm zero-day in Mali GPU Drivers actively exploited in the wild
Semiconductor and software design company Arm warns of an actively exploited zero-day vulnerability in Mali GPU Kernel Driver. Arm is warning of an ac… First seen on securityaffairs.com Jump to article: securityaffairs.com/164430/hacking/arm-zero-day-actively-exploited.html
-
Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation
The zero-day is tagged as CVE-2024-32896 and described as an elevation of privilege issue in Pixel Firmware. The post -day is tagged as CVE-2024-32896… First seen on securityweek.com Jump to article: www.securityweek.com/google-warns-of-pixel-firmware-zero-day-under-limited-targeted-exploitation/
-
Neue Schwachstelle in Windows wird bereits ausgenutzt – So enttarnten Security-Experten eine Zero-Day-Schwachstelle in Windows
First seen on security-insider.de Jump to article: www.security-insider.de/kaspersky-entdeckt-zero-day-schwachstelle-in-windows-2024-a-bf1218123e4872260afea62685df983f/
-
Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day
The Black Basta ransomware gang may have exploited the Windows privilege escalation flaw CVE-2024-26169 before it was patched. The post k Basta ransom… First seen on securityweek.com Jump to article: www.securityweek.com/ransomware-group-may-have-exploited-windows-vulnerability-as-zero-day/
-
China Using Hacking Competitions to Develop Domestic Talent
Government Nurtures Homegrown Talent and Hack-for-Hire Ecosystem, Research Finds. China boasts many of the world’s most talented zero-day vulnerabilit… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/china-using-hacking-competitions-to-develop-domestic-talent-a-25512
-
Black Basta ransomware gang linked to Windows zero-day attacks
The Cardinal cybercrime group (Storm-1811, UNC4394), who are the main operators of the Black Basta ransomware, is suspected of exploiting a Windows pr… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/black-basta-ransomware-gang-linked-to-windows-zero-day-attacks/
-
Google warns of actively exploited Pixel firmware zero-day
Google has released patches for 50 security vulnerabilities impacting its Pixel devices and warned that one of them had already been exploited in targ… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-warns-of-actively-exploited-pixel-firmware-zero-day/
-
Check Point Warning: VPN Gateway Products’ Zero-Day Attack
Check Point has issued an alert regarding a critical zero-day vulnerability identified in its Network Security gateway products. As per the Check Poin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/check-point-warning-vpn-gateway-products-zero-day-attack/
-
Black Basta may have exploited Microsoft flaw as zero-day
While investigating a ransomware attack, Symantec observed tactics, techniques and procedures that suggest Black Basta threat actors exploited a Micro… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366588641/Black-Basta-may-have-exploited-Microsoft-flaw-as-zero-day
-
Check Point Releases Fix For Zero-Day VPN Flaw
The flaw (CVE-2024-24919) could enable attackers to read certain information on Gateways if they are connected to the Internet and enabled with Remote… First seen on duo.com Jump to article: duo.com/decipher/check-point-releases-fix-for-exploited-vpn-flaw
-
Talos discloses multiple zero-day vulnerabilities, two of which could lead to code execution
Two vulnerabilities in this group, one in the Tinyroxy HTTP proxy daemon and another in the stb_vorbis.c file library, could lead to arbitrary code ex… First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/vulnerability-roundup-zero-days-may-8-2024/
-
Google patches its fifth zero-day vulnerability of the year in Chrome
First seen on arstechnica.com Jump to article: arstechnica.com/
-
In Other News: TikTok Zero-Day, DMM Bitcoin Hack, Free VPN App Analysis
Noteworthy stories that might have slipped under the radar: TikTok patches account hijacking zero-day, $300 million DMM Bitcoin hack, free Android VPN… First seen on securityweek.com Jump to article: www.securityweek.com/in-other-news-tiktok-zero-day-dmm-bitcoin-hack-free-vpn-app-analysis/
-
Check Point Warns of Zero-Day Attacks on its VPN Gateway Products
Check Point is warning of a zero-day vulnerability in its Network Security gateway products that threat actors have exploited in the wild.Tracked as C… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/check-point-warns-of-zero-day-attacks.html
-
Apple Refused to Pay $1 Million Bounty to Kaspersky Lab for iOS Zero-days
Apple has refused to pay Kaspersky Lab a reward for discovering critical vulnerabilities in iOS that allowed attackers to install spyware on any iPhon… First seen on gbhackers.com Jump to article: gbhackers.com/apple-kaspersky-zero-days/
-
Exploitation of Recent Check Point VPN Zero-Day Soars
GreyNoise has observed a rapid increase in the number of exploitation attempts targeting a recent Check Point VPN zero-day. The post e has observed a … First seen on securityweek.com Jump to article: www.securityweek.com/exploitation-of-recent-check-point-vpn-zero-day-soars/
-
TikTok: Zero-Day-Lücke ermöglichte Übernahme von Promi- und Marken-Accounts
Tags: zero-dayFirst seen on heise.de Jump to article: www.heise.de/news/TikTok-Zero-Day-Luecke-ermoeglichte-Uebernahme-von-Promi-und-Marken-Accounts-9748177.html
-
Check Point warnt vor Schwachstelle in seinen VPN-Gateways – Zero-Day-Angriffe auf Check Point-Produkte möglich
First seen on security-insider.de Jump to article: www.security-insider.de/check-point-warnt-vor-angriffen-auf-vpn-produkte-a-f9667123fe1b4ecb2658b408afb8770d/
-
Google Chrome: Vierte bereits missbrauchte Zero-Day-Lücke in zwei Wochen
First seen on heise.de Jump to article: www.heise.de/news/Google-Chrome-Vierte-bereits-missbrauchte-Zero-Day-Luecke-in-zwei-Wochen-9730530.html
-
TikTok fixes zero-day bug used to hijack high-profile accounts
Tags: zero-dayOver the past week, attackers have hijacked high-profile TikTok accounts belonging to multiple companies and celebrities, exploiting a zero-day vulner… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/tiktok-fixes-zero-day-bug-used-to-hijack-high-profile-accounts/
-
Hackers Hijack High-Profile TikTok Accounts in Zero-Day Cyberattack
Malicious actors recently hacked high-profile TikTok accounts of big companies and celebrities and exploited a zero-day vulnerability in TikTok’s dire… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/tiktok-zero-day-vulnerability/
-
Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack
The MITRE Corporation has revealed that the cyber attack targeting the not-for-profit company towards late December 2023 by exploiting zero-day flaws … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/hackers-created-rogue-vms-to-evade.html
-
PoC Published for Exploited Check Point VPN Vulnerability
PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances. The post targeting … First seen on securityweek.com Jump to article: www.securityweek.com/poc-published-for-exploited-check-point-vpn-vulnerability/
-
Update Chrome Browser Now: 4th Zero-Day Exploit Discovered in May 2024
Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.Assigne… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/google-detects-4th-chrome-zero-day-in.html