Tag: zero-day
-
Cyber spies, not cyber criminals, behind most zero-day exploitation
Analysis from Google has found that zero-day vulnerabilities are much more heavily exploited for espionage purposes than for financially motivated cyb… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366575672/Cyber-spies-not-cyber-criminals-behind-most-zero-day-exploitation
-
Spyware vendors behind 75% of zero-days targeting Google
Google observed 97 zero-day vulnerabilities exploited in the wild last year, which was more than a 50% increase over the 62 exploited zero-day vulnera… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366575693/Spyware-vendors-behind-75-of-zero-days-targeting-Google
-
Cisco Zero-Days Anchor ‘ArcaneDoor’ Cyber Espionage Campaign
Attacks by a previously unknown threat actor leveraged two bugs in firewall devices to install custom backdoors on several government networks globall… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/cisco-zero-days-arcanedoor-cyberespionage-campaign
-
Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms
Cisco warns that nation state-backed hackers are exploiting at least two zero-day vulnerabilities in its ASA firewall platforms to plant malware on te… First seen on securityweek.com Jump to article: www.securityweek.com/cisco-raises-alarm-for-arcanedoor-zero-days-hitting-asa-firewall-platforms/
-
Alert! Cisco Releases Critical Security Updates to Fix 2 ASA Firewall 0-Days
Cisco has released critical security updates to address multiple vulnerabilities in its Adaptive Security Appliance (ASA) devices and Firepower Threat… First seen on gbhackers.com Jump to article: gbhackers.com/cisco-releases-critical-security-updates/
-
Hackers Exploit Cisco Firewall Zero-Days to Hack Government Networks
Security researchers at Cisco Talos have uncovered a sophisticated cyber espionage campaign dubbed >>ArcaneDoor
-
Global attacker median dwell time continues to fall
While the use of zero-day exploits is on the rise, Mandiant’s M-Trends 2024 report reveals a significant improvement in global cybersecurity posture: … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/24/2023-attacker-dwell-time/
-
MITRE research and prototyping network breached via Ivanti zero-days
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/mitre-research-and-prototyping-network-breached-via-ivanti-zero-days
-
Cisco Fixes Firewall 0-Days After Likely Nation-State Hack
Networking Giant Dubs Campaign Against Government Customers ‘Arcane Door’. Probable nation-state hackers targeted Cisco firewall appliances in a campa… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisco-fixes-firewall-0-days-after-likely-nation-state-hack-a-24934
-
CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)
A vulnerability (CVE-2024-4040) in enterprise file transfer solution CrushFTP is being exploited by attackers in a targeted fashion, according to Crow… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/23/cve-2024-4040/
-
Ivanti zero-days leveraged to infiltrate MITRE
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/ivanti-zero-days-leveraged-to-infiltrate-mitre
-
Intrusions exploiting critical CrushFTP zero-day underway
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/intrusions-exploiting-critical-crushftp-zero-day-underway
-
Palo Alto Networks: Hacker infiltrieren Firewalls durch Zero-Day-Schwachstelle
Erste Angriffe über die Schwachstelle hat es schon Ende März gegeben. Einen Hotfix für die betroffenen Firewallsysteme stellt Palo Alto Networks erst … First seen on golem.de Jump to article: www.golem.de/news/palo-alto-networks-hacker-infiltrieren-firewalls-durch-zero-day-schwachstelle-2404-184163.html
-
Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack
Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly thre… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/hackers-deploy-python-backdoor-in-palo.html
-
MITRE breached by nation-state threat actor via Ivanti zero-days
MITRE has been breached by attackers via two zero-day vulnerabilities (CVE-2023-46805, CVE-2024-21887) in Ivanti’s Connect Secure VPN devices. The att… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/22/mitre-breached/
-
Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability
Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product. The post o Networks firewall v… First seen on securityweek.com Jump to article: www.securityweek.com/siemens-industrial-product-impacted-by-exploited-palo-alto-firewall-vulnerability/
-
CrushFTP Patches Exploited Zero-Day Vulnerability
CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files. The post patches a zero-day… First seen on securityweek.com Jump to article: www.securityweek.com/crushftp-patches-exploited-zero-day-vulnerability/
-
Critical CrushFTP zero-day exploited in attacks in the wild
Threat actors exploited a critical zero-day vulnerability in the CrushFTP enterprise in targeted attacks, Crowdstrike experts warn. CrushFTP is a file… First seen on securityaffairs.com Jump to article: securityaffairs.com/162067/hacking/crushftp-zero-day-exploited.html
-
CrushFTP warns users to patch exploited zero-day immediately
CrushFTP warned customers today in a private memo of an actively exploited zero-day vulnerability fixed in new versions released today, urging them to… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/
-
MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days
MITRE RD network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability. The post #038;D network ha… First seen on securityweek.com Jump to article: www.securityweek.com/mitre-hacked-by-state-sponsored-group-via-ivanti-zero-days/
-
Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack
Palo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild.Tra… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/zero-day-alert-critical-palo-alto.html
-
CrushFTP Servers Zero-day Under Active Attack: Update Now
CrushFTP is a file transfer server that supports secure protocols, offers easier configuration, and offers powerful monitoring tools. It also provides… First seen on gbhackers.com Jump to article: gbhackers.com/crushftp-zero-day-update/
-
Alert! Zero-day Exploit For WhatsApp Advertised On Hacker Forums
A zero-day exploit targeting the popular messaging app WhatsApp has been advertised on underground hacker forums. The exploit has raised serious conce… First seen on gbhackers.com Jump to article: gbhackers.com/zero-day-exploit-whatsapp-hacker-forums/
-
MITRE revealed that nation-state actors breached its systems via Ivanti zero-days
The MITRE Corporation revealed that a nation-state actor compromised its systems in January 2024 by exploiting Ivanti VPN zero-days. In April 2024, MI… First seen on securityaffairs.com Jump to article: securityaffairs.com/162045/security/mitre-security-breach-ivanti-zero-days.html
-
Palo Alto Network Issues Hotfixes for Zero-Day Bug in Its Firewall OS
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/palo-alto-network-issues-hot-fixes-for-zero-day-bug-in-its-firewall-os
-
Mitre Says Hackers Breached Unclassified R&D Network
Threat Actor Exploited Ivanti Zero-Day Vulnerabilities in Cyberattack. A nation-state threat actor gained access into an unclassified research and dev… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/mitre-says-hackers-breached-unclassified-rd-network-a-24907
-
Alert! Windows LPE Zero-day Exploit Advertised on Hacker Forums
A new zero-day Local Privilege Escalation (LPE) exploit has been put up for sale on a notorious hacker forum. This exploit, which has not yet been ass… First seen on gbhackers.com Jump to article: gbhackers.com/windows-lpe-zero-day/
-
Palo Alto ZeroDay Exploited in The Wild Following PoC Release
Palo Alto Networks has disclosed a critical vulnerability within its PAN-OS operating system, identified as CVE-2024-3400. This zero-day flaw, found i… First seen on gbhackers.com Jump to article: gbhackers.com/palo-alto-zeroday-exploited-in-wild/
-
Miscreants are exploiting enterprise tech zero days more and more, Google warns
First seen on theregister.com Jump to article: www.theregister.com/2024/03/27/surge_in_enterprise_zero_days/