Tag: zero-day
-
Google Discovers Fourth Zero-Day in Less Than a Month
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/google-discovers-fourth-zero-day-in-less-than-a-month
-
Check Point VPN zero-day exploited since beginning of April (CVE-2024-24919)
Attackers have been exploiting CVE-2024-24919, a zero-day vulnerability in Check Point Security Gateways, to pinpoint and extract password hashes for … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/31/cve-2024-24919/
-
Check Point patches VPN 0-day exploited to target enterprises
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/check-point-patches-vpn-0-day-exploited-to-target-enterprises
-
Check Point released hotfix for actively exploited VPN zero-day
Check Point released hotfixes for a VPN zero-day vulnerability, tracked as CVE-2024-24919, which is actively exploited in attacks in the wild. Check P… First seen on securityaffairs.com Jump to article: securityaffairs.com/163850/digital-id/check-point-vpn-zero-day-hotfix.html
-
QakBot: Neue WindowsDay-Schwachstelle ausgenutzt
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/qakbot-neuheit-windows-zero-day-schwachstelle-ausnutzung
-
Google Patches Fourth Chrome Zero Day In Two Weeks
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35924/Google-Patches-Fourth-Chrome-Zero-Day-In-Two-Weeks.html
-
Check Point VPN zero-day exploited in attacks since April 30
Threat actors have been exploiting a high-severity Check Point Remote Access VPN zero-day since at least April 30, stealing Active Directory data need… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/check-point-vpn-zero-day-exploited-in-attacks-since-april-30/
-
Check Point VPN Attacks Involve Zero-Day Exploited Since April
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords. The post n… First seen on securityweek.com Jump to article: www.securityweek.com/check-point-vpn-attacks-involve-zero-day-exploited-since-april/
-
Check Point releases emergency fix for VPN zero-day exploited in attacks
Check Point has released hotfixes for a VPN zero-day vulnerability exploited in attacks to gain remote access to firewalls and attempt to breach corpo… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/check-point-releases-emergency-fix-for-vpn-zero-day-exploited-in-attacks/
-
Flaw in TP-Link Gaming Router Allows Remote Attacks
Unsanitized Inputs Leads to Remote Code Execution. A gaming Wi-Fi router contained a zero-day that allowed a remote unauthenticated attacker to execut… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/flaw-in-tp-link-gaming-router-allows-remote-attacks-a-25355
-
Google Patches Chrome Zero-Day: Type Confusion in V8 JavaScript
Google has released a patch for a zero-day exploit in its Chrome browser. The vulnerability, identified as CVE-2024-5274, involves a confusion issue i… First seen on gbhackers.com Jump to article: gbhackers.com/patches-chrome-zero-day/
-
Week in review: Google fixes yet another Chrome zero-day exploit, YouTube as a cybercrime channel
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Google fixes yet another Chrome zero-day exploited i… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/26/week-in-review-google-fixes-yet-another-chrome-zero-day-exploit-youtube-as-a-cybercrime-channel/
-
Google fixes yet another Chrome zero-day exploited in the wild (CVE-2024-5274)
For the eighth time this year, Google has released an emergency update for its Chrome browser that fixes a zero-day vulnerability (CVE-2024-5274) with… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/24/cve-2024-5274/
-
Google patches fourth zero-day in May, eighth so far of 2024
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/google-patches-fourth-zero-day-this-month-eighth-so-far-in-2024
-
Alert: Google Chrome Zero-Day Patch Fixes Critical Flaw
In recent cybersecurity news, Google has swiftly addressed a critical security concern by releasing an emergency update for its Chrome browser. This u… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/alert-google-chrome-zero-day-patch-fixes-critical-flaw/
-
Google Patches Fourth Chrome Zero-Day in Two Weeks
Exploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly e… First seen on securityweek.com Jump to article: www.securityweek.com/google-patches-fourth-chrome-zero-day-in-two-weeks/
-
Google fixes eighth actively exploited Chrome zero-day this year, the third in a month
Google rolled out a new emergency security update to fix another actively exploited zero-day vulnerability in the Chrome browser. Google has released … First seen on securityaffairs.com Jump to article: securityaffairs.com/163642/hacking/8th-chrome-zero-day-2024-html.html
-
Google fixes eighth actively exploited Chrome zero-day this year
Google has released a new emergency security update to address the eighth zero-day vulnerability in Chrome browser confirmed to be actively exploited … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-fixes-eighth-actively-exploited-chrome-zero-day-this-year/
-
Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability
Google has rolled out fixes to address a set of nine security issues in its Chrome browser, including a new zero-day that has been exploited in the wi… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/google-patches-yet-another-actively.html
-
Malware im Anmarsch: Schwachstelle in Windows wird aktiv ausgenutzt
Anfällig sind nicht nur Windows 10 und 11, sondern auch Windows Server 2016, 2019 und 2022. Hacker nutzen die Zero-Day-Schwachstelle aus, um Systemrec… First seen on golem.de Jump to article: www.golem.de/news/malware-im-anmarsch-schwachstelle-in-windows-wird-aktiv-ausgenutzt-2405-185134.html
-
Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report
Attackers are getting more sophisticated, better armed, and faster. Nothing in Rapid7’s 2024 Attack Intelligence Report suggests that this will change… First seen on securityweek.com Jump to article: www.securityweek.com/zero-day-attacks-and-supply-chain-compromises-surge-mfa-remains-underutilized-rapid7-report/
-
Google Detects 4th Chrome Zero-Day in May Actively Under Attack – Update ASAP
Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.Assigne… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/google-detects-4th-chrome-zero-day-in.html
-
Over 60% of Network Security Appliance Flaws Exploited as Zero Days
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/network-security-flaws-exploited/
-
Google schließt aktiv genutzte Lücke in Chromium Day-Schwachstelle in Google Chrome und Microsoft Edge
First seen on security-insider.de Jump to article: www.security-insider.de/aktuelle-zero-day-luecke-in-chrome-und-edge-a-0a83278c75562bd3f83bda1b07b0745f/
-
Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days
Microsoft has addressed a total of 61 new security flaws in its software as part of its Patch Tuesday updates for May 2024, including two zero-days wh… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/microsoft-patches-61-flaws-including.html
-
Weitere Zero-Day-Lücke mit Update geschlossen
First seen on heise.de Jump to article: www.heise.de/news/Chrome-Weitere-Zero-Day-Luecke-mit-Update-geschlossen-9720152.html
-
Cisco zero-day flaws in ASA, FTD software under attack
Cisco revealed a nation-state threat campaign dubbed ArcaneDoor exploited two zero-day vulnerabilities in its Adaptive Security Appliance and Firepowe… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366582137/Cisco-zero-day-flaws-in-ASA-FTD-software-under-attack
-
New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation
Google on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild…. First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/new-chrome-zero-day-vulnerability-cve.html
-
Hacker wollen eine 0Day-Lücke bei VPN-Geräten von Zyxel entdeckt haben – Anzeichen für eine Zero-Day-Schwachstelle bei Zyxel-Geräten
First seen on security-insider.de Jump to article: www.security-insider.de/zyxel-vpn-geraete-0-day-schwachstelle-bedrohung-a-ffa1171f68bc8bb60adeb6ceff1ebb95/
-
Critical CrushFTP zero-day vulnerability under attack
While a patch is now available, a critical CrushFTP vulnerability came under attack as a zero-day and could allow attackers to exfiltrate all files on… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366581942/Critical-CrushFTP-zero-day-vulnerability-under-attack