Tag: zero-day
-
North Korea-linked APT Citrine Sleet exploit Chrome zero-day to deliver FudModule rootkit
North Korea-linked APT exploited the recently patched Google Chrome zero-day CVE-2024-7971 to deploy the FudModule rootkit. North Korea-linked group C… First seen on securityaffairs.com Jump to article: securityaffairs.com/167848/breaking-news/north-korea-linked-apt-exploited-chrome-zero-day-cve-2024-7971.html
-
North Korean hackers exploit Chrome zero-day to deploy rootkit
North Korean hackers have exploited a recently patched Google Chrome zero-day (CVE-2024-7971) to deploy the FudModule rootkit after gaining SYSTEM pri… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/north-korean-hackers-exploit-chrome-zero-day-to-deploy-rootkit/
-
Suspected North Korean hackers targeted crypto industry with Chromium zero-day
First seen on therecord.media Jump to article: therecord.media/suspected-north-korean-hackers-crypto-chromium-zero-day
-
South Korea-linked group APT-C-60 exploited a WPS Office zero-day
South Korea-linked group APT-C-60 exploited a zero-day in the Windows version of WPS Office to target East Asian countries. South Korea-linked group A… First seen on securityaffairs.com Jump to article: securityaffairs.com/167825/hacking/apt-c-60-wps-office-zero-day.html
-
Verbesserte Erkennung von Zero-Day-Phishing-Kampagnen
Die Sicherheitsforscher von Check Point Software Technologies haben eine bedeutende Verbesserung in der Erkennung und Abwehr von Phishing- und Malware… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/08/27/verbesserte-erkennung-von-zero-day-phishing-kampagnen/
-
Operation DevilTiger, APT Hackers 0-Day Exploitation Tactics Exposed
The APT-Q-12 group, also known as Pseudo Hunter, is a Northeast Asian threat actor linked to Darkhotel, which primarily targets East Asian countries, … First seen on gbhackers.com Jump to article: gbhackers.com/deviltiger-apt-zero-day/
-
South Korean Spies Exploit WPS Office Zero-Day
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/south-korean-spies-exploit-wps/
-
Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control
Details have emerged about a China-nexus threat group’s exploitation of a recently disclosed, now-patched security flaw in Cisco switches as a zero-da… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/chinese-hackers-exploit-zero-day-cisco.html
-
Resurrecting Internet Explorer: Threat Actors Using Zero-day Tricks in Internet Shortcut File to Lure Victims (CVE-2024-38112)
y Haifei Li Introduction and Background Check Point Research recently discovered that threat actors have been using novel (or previously unknown) tric… First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2024/resurrecting-internet-explorer-threat-actors-using-zero-day-tricks-in-internet-shortcut-file-to-lure-victims-cve-2024-38112/
-
South Korean hackers exploited WPS Office zero-day to deploy malware
The South Korea-aligned cyberespionage group APT-C-60 has been leveraging a zero-day code execution vulnerability in the Windows version of WPS Office… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apt-c-60-hackers-exploited-wps-office-zero-day-to-deploy-spyglace-malware/
-
Malware exploits 5-year-old zero-day to infect end-of-life IP cameras
The Corona Mirai-based malware botnet is spreading through a 5-year-old remote code execution (RCE) zero-day in AVTECH IP cameras, which have been dis… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malware-exploits-5-year-old-zero-day-to-infect-end-of-life-ip-cameras/
-
ESET Uncovers Zero-Day Vulnerabilities in WPS Office, Exploited by APT-C-60
ESET researchers have identified two severe vulnerabilities in WPS Office for Windows, widely exploited by the APT-C-60 cyberespionage group, which is… First seen on securityonline.info Jump to article: securityonline.info/eset-uncovers-zero-day-vulnerabilities-in-wps-office-exploited-by-apt-c-60/
-
Chinese Hackers Deploy VersaMem Web Shell via Versa Director Zero-Day (CVE-2024-39717)
Black Lotus Labs, a threat intelligence team within Lumen Technologies, has uncovered the active exploitation of a zero-day vulnerability in Versa Dir… First seen on securityonline.info Jump to article: securityonline.info/chinese-hackers-deploy-versamem-web-shell-via-versa-director-zero-day-cve-2024-39717/
-
Google Patches Ninth Chrome Zero Day Of 2024
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36252/Google-Patches-Ninth-Chrome-Zero-Day-Of-2024.html
-
Chinese Velvet Ant Uses Cisco Zero-Day to Deploy Custom Malware
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-velvet-ant-cisco-0day/
-
Versa Director Zero-day Vulnerability Let Attackers Upload Malicious Files
Versa Networks specializes in successful business. It offers Secure Access Service Edge (SASE), consolidating networking and security services in a si… First seen on gbhackers.com Jump to article: gbhackers.com/versa-director-zero-day-vulnerability-attack/
-
China-Nexus Group Velvet Ant Exploits Cisco Zero-Day (CVE-2024-20399)
At the beginning of 2024, the Chinese group Velvet Ant exploited a patched zero-day vulnerability (CVE-2024-20399, CVSS 6.7) in Cisco switches to gain… First seen on securityonline.info Jump to article: securityonline.info/china-nexus-group-velvet-ant-exploits-cisco-zero-day-cve-2024-20399/
-
China-linked APT Volt Typhoon exploited a zero-day in Versa Director
China-linked APT group Volt Typhoon exploited a zero-day flaw in Versa Director to upload a custom webshell in target networks. China-linked APT Volt … First seen on securityaffairs.com Jump to article: securityaffairs.com/167658/apt/volt-typhoon-versa-director-zero-day.html
-
Attacks exploiting Versa Director zero-day launched by Volt Typhoon
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/attacks-exploiting-versa-director-zero-day-launched-by-volt-typhoon
-
Another exploited Chrome zero-day addressed
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/another-exploited-chrome-zero-day-addressed
-
3CX Phone System Local Privilege Escalation Vulnerability
Overview In an effort to safeguard our customers, we perform proactive vulnerability research with the goal of identifying zero-day vulnerabilities th… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/3cx-phone-system-local-privilege-escalation-vulnerability/
-
WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies
A WPS Office zero-day vulnerability tracked as CVEâ -â 2024â -â 7262 was exploited by South Korean hacker group APT-C-60. The post WPS Office Zero… First seen on securityweek.com Jump to article: www.securityweek.com/wps-office-zero-day-exploited-by-south-korea-linked-cyberspies/
-
Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets Service Providers
Amidst Volt Typhoon zero-day exploitation, Censys finds hundreds of exposed servers presenting ripe attack surface for attackers. The post Censys Find… First seen on securityweek.com Jump to article: www.securityweek.com/censys-finds-hundreds-of-exposed-servers-as-volt-typhoon-apt-targets-isps-msps/
-
Hacker nutzen Zero-Day-Lücke für Kernelzugriff aus
Möglich ist der Kernelzugriff durch einen Windows-Treiber namens AFD.sys. Mindestens seit Juni installiert eine bekannte Hackergruppe darüber ein Root… First seen on golem.de Jump to article: www.golem.de/news/windows-hacker-nutzen-zero-day-luecke-fuer-kernelzugriff-aus-2408-188165.html
-
ISPs infiltriert: Zero Day seit Monaten ausgenutzt‹
Tags: zero-dayFirst seen on heise.de Jump to article: www.heise.de/news/Zero-Day-Versa-Director-Angreifer-nisten-sich-bei-ISPs-ein-9849553.html
-
Google addressed the tenth actively exploited Chrome zero-day this year
Google released emergency security updates to fix the tenth actively exploited Chrome zero-day vulnerability this year. Google released a security upd… First seen on securityaffairs.com Jump to article: securityaffairs.com/167631/hacking/10th-google-chrome-zero-day-this-year.html
-
Versa Director zero-day exploited to compromise ISPs, MSPs (CVE-2024-39717)
Advanced, persistent attackers have exploited a zero-day vulnerability (CVE-2024-39717) in Versa Director to compromise US-based managed service provi… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/27/cve-2024-39717-exploited/
-
Chinese Nation-State Attackers Tied to Versa Zero-Day Hit
Targeted Versa Software Used by Service Providers to Manage Wide Area Networks. Chinese nation-state attackers are actively exploiting a zero-day vuln… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/chinese-nation-state-attackers-tied-to-versa-zero-day-hit-a-26152
-
Chinese Volt Typhoon hackers exploited Versa zero-day to breach ISPs, MSPs
The Chinese state-backed hacking group Volt Typhoon is behind attacks that exploited a zero-day flaw in Versa Director to upload a custom webshell to … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-volt-typhoon-hackers-exploited-versa-zero-day-to-breach-isps-msps/
-
Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs
Amidst Volt Typhoon zero-day exploitation, Censys finds hundreds of exposed servers presenting ripe attack surface for attackers. The post Censys Find… First seen on securityweek.com Jump to article: www.securityweek.com/censys-finds-hundreds-of-exposed-servers-as-volt-typhoon-apt-targets-isps-msps/