Tag: zero-day
-
Microsoft Patch Tuesday security updates for September 2024 addressed four actively exploited zero-days
Microsoft Patch Tuesday security updates for September 2024 addressed 79 flaws, including four actively exploited zero-day flaws. Microsoft Patch Tues… First seen on securityaffairs.com Jump to article: securityaffairs.com/168279/security/microsoft-patch-tuesday-sept-2024.html
-
Microsoft’s September 2024 Patch Tuesday Addresses 4 Zero-Days, 79 Vulnerabilities
On September 10, 2024, Microsoft released its latest round of security updates as part of its monthly Patch Tuesday program. This month’s updates addr… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/microsofts-september-2024-patch-tuesday-addresses-4-zero-days-79-vulnerabilities/
-
Microsoft September 2024 Patch Tuesday Fixes 79 Flaws, Including 4 Zero-Days
First seen on hackread.com Jump to article: hackread.com/microsoft-september-2024-patch-tuesday-flaws-update/
-
Adobe patches Acrobat bug, neglects to mention whole zero-day, exploit thing
First seen on theregister.com Jump to article: www.theregister.com/2024/09/12/adobe_acrobat_0day/
-
Microsoft September 2024 Patch Tuesday fixes 4 zero-days, 79 flaws
Today is Microsoft’s September 2024 Patch Tuesday, which includes security updates for 79 flaws, including four actively exploited and one publicly di… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-september-2024-patch-tuesday-fixes-4-zero-days-79-flaws/
-
North Korea’s ‘Citrine Sleet’ APT Exploits Zero-Day Chromium Bug
Microsoft warned that the DPRK’s latest innovative tack chains together previously unknown browser issues, then adds a rootkit to the mix to gain deep… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/north-korean-apt-exploits-novel-chromium-windows-bugs-steal-crypto
-
Microsoft fixes 4 exploited zero-days and a code defect that nixed earlier security fixes
September 2024 Patch Tuesday is here and Microsoft has delivered 79 fixes, including those for a handful of zero-days (CVE-2024-38217, CVE-2024-38226,… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/10/cve-2024-38217-cve-2024-43491/
-
Microsoft Fixes Four 0-Days, One Exploited for SIX YEARS
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/patch-tuesday-september-2024-richixbw/
-
Chinese APT Exploits Versa Networks Zero-Day Flaw
The vulnerability impacts versions of Versa Director prior to 22.1.4, and Versa Networks recommends that impacted users update to the fixed version as… First seen on duo.com Jump to article: duo.com/decipher/chinese-apt-exploits-versa-networks-zero-day-flaw
-
North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit
A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day by North Korean actors in a campaign des… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/north-korean-hackers-deploy-fudmodule.html
-
CCTV Zero-Day Exposes Critical Infrastructure to Mirai Botnet
First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/cctv-zero-day-targeted-by-mirai-botnet-campaign
-
Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks
A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet.CVE-2024-7… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/unpatched-avtech-ip-camera-flaw.html
-
APT60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor
A South Korea-aligned cyber espionage has been linked to the zero-day exploitation of a now-patched critical remote code execution flaw in Kingsoft WP… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/apt-c-60-group-exploit-wps-office-flaw.html
-
Velvet Ant Exploits Cisco Zero-Day Flaw For System Control
In light of recent cybercrime events, details pertaining to the Cisco zero-day flaw that has now been patched have emerged. As per the details, the fl… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/velvet-ant-exploits-cisco-zero-day-flaw-for-system-control/
-
Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors
The China-nexus cyber espionage group tracked as Volt Typhoon has been attributed with moderate confidence to the zero-day exploitation of a recently … First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/chinese-volt-typhoon-exploits-versa.html
-
Chromium zero-day leveraged by North Korean hackers
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/chromium-zero-day-leveraged-by-north-korean-hackers
-
China’s Volt Typhoon Exploits Zero-Day in Versa’s SD-WAN Director Servers
So far, the threat actor has compromised at least five organizations using CVE-2024-39717; CISA has added bug to its Known Exploited Vulnerability dat… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/china-s-volt-typhoon-actively-exploiting-now-patched-0-day-in-versa-director-servers
-
PoC Exploit Released For 0-Day Windows Kernel Privilege Escalation Vulnerability
Microsoft released several patches for multiple vulnerabilities during the Patch Tuesday for August 2024. One of the vulnerabilities listed by Microso… First seen on gbhackers.com Jump to article: gbhackers.com/windows-0-day-poc-exploit/
-
Google Patches Actively Exploited Android 0-day Privilege Escalation Vulnerability
Google has released a patch addressing a critical zero-day vulnerability that has been actively exploited. This vulnerability, CVE-2024-32896, is a pr… First seen on gbhackers.com Jump to article: gbhackers.com/google-patchesandroid-0-day-vulnerability/
-
CVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day
In a recent cybersecurity report, Microsoft Threat Intelligence has revealed that a North Korean threat actor, believed to be Citrine Sleet, has been … First seen on securityonline.info Jump to article: securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/
-
Volt Typhoon Hackers Exploit Zero-Day Vulnerability in Versa Director Servers Used by MSPs, ISPs
First seen on techrepublic.com Jump to article: www.techrepublic.com/article/volt-typhoon-exploits-versa-director/
-
Volt Typhoon exploiting zero-day in campaign targeting ISPs, MSPs
<figure><div><img src=https://www.cybersecuritydive.com/imgproxy/AeYaSLh-KQ8pm8YqsHv7gEs_SUnUxcjXJLlvxSJWLlQ/g:ce/bG9jYWw6Ly8vZGl2ZWltY… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/volt-typhoon-zero-day-isps-msps/725492/
-
North Korean Hackers Actively Exploiting Chromium RCE Zero-Day In The Wild
Tags: exploit, hacker, microsoft, north-korea, rce, remote-code-execution, threat, vulnerability, zero-dayMicrosoft has identified a North Korean threat actor, Citrine Sleet, exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote co… First seen on gbhackers.com Jump to article: gbhackers.com/chromium-rce-zero-day-in-the-wild/
-
Unpatchable Zero Day In Surveillance Cam Is Being Exploited To Install Mirai
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36271/Unpatchable-Zero-Day-In-Surveillance-Cam-Is-Being-Exploited-To-Install-Mirai.html
-
Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day
Redmond’s threat intel team said exploitation of CVE-2024-7971 can be attributed to a North Korean APT targeting the cryptocurrency sector for financi… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-north-korean-cryptocurrency-thieves-behind-chrome-zero-day/
-
Operation DevilTiger: APT12’s Shadowy Tactics and Zero-Day Exploits Unveiled
The QiAnXin Threat Intelligence Center has disclosed the technical details of a sophisticated cyber espionage campaign dubbed >>Operation DevilTiger,
-
North Korean Hackers Tied to Exploits of Chromium Zero-Day
Cryptocurrency Users Targeted in Latest Campaign Involving FudModule Rootkit. A hacking group tied to North Korea exploited a zero-day vulnerability i… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/north-korean-hackers-tied-to-exploits-chromium-zero-day-a-26181