Tag: zero-day
-
Google tags a tenth Chrome zero-day as exploited this year
Today, Google revealed that it patched the tenth zero-day exploited in the wild in 2024 by attackers or security researchers during hacking contests. … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-tags-a-tenth-chrome-zero-day-as-exploited-this-year/
-
China’s Volt Typhoon Exploits 0-day in Versa’s SD-WAN Director Servers
So far, the threat actor has compromised at least five organizations using CVE-2024-39717; CISA has added bug to its Known Exploited Vulnerability dat… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/china-s-volt-typhoon-actively-exploiting-now-patched-0-day-in-versa-director-servers
-
News Chrome 0-Day Vulnerability (CVE-2024-7965) Actively Exploited in the Wild
The Chrome team announced that Chrome 128 has been promoted to the stable channel for Windows, Mac, and Linux. This update, Chrome 128.0.6613.84/.85, … First seen on gbhackers.com Jump to article: gbhackers.com/news-chrome-0-day-vulnerability/
-
Week in review: PostgreSQL databases under attack, new Chrome zero-day actively exploited
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: PostgreSQL databases under attack Poorly protected P… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/25/week-in-review-postgresql-databases-under-attack-new-chrome-zero-day-actively-exploited/
-
China’s Volt Typhoon Hackers Caught Exploiting Zero-Day in Servers Used by ISPs, MSPs
Malware hunters catch Chinese APT Volt Typhoon exploiting a zero-day in Versa Director servers used by ISPs and MSPs. The post China’s Volt Typhoon Ha… First seen on securityweek.com Jump to article: www.securityweek.com/chinese-apt-volt-typhoon-caught-exploiting-versa-networks-sd-wan-zero-day/
-
0-day-Schwachstelle CVE-2024-38193 wurde durch Lazarus angegriffen
Zum 13. August 2024 hat Microsoft die 0-day-Schwachstelle CVE-2024-38193 im Treiber afd.sys mit einem Sicherheitsupdate geschlossen. Dort hieß es vage… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/20/windows-0-day-schwachstelle-cve-2024-38193-wurde-durch-lazarus-angegriffen/
-
Critical Chrome Zero-Day Vulnerability (CVE-2024-7965) Requires Immediate User Action
Google recently addressed a critical zero-day vulnerability in its Chrome browser, identified as CVE-2024-7965. This high-severity flaw, affecting ver… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/google-fixes-chrome-zero-day-vulnerability/
-
China’s Volt Typhoon reportedly targets US internet providers using Versa zero-day
First seen on therecord.media Jump to article: therecord.media/versa-zero-day-volt-typhoon-china
-
Versa fixes Director zero-day vulnerability exploited in attacks
Versa Networks has fixed a zero-day vulnerability exploited in the wild that allows attackers to upload malicious files by exploiting an unrestricted … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/versa-fixes-director-zero-day-vulnerability-exploited-in-attacks/
-
Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with Nort… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-patches-zero-day-flaw.html
-
Chinese government hackers targeted U.S. internet providers with zero-day exploit, researchers say
Tags: china, exploit, government, group, hacker, Internet, service, software, vulnerability, zero-dayA group of hackers linked to the Chinese government used a previously unknown vulnerability in software to target U.S. internet service providers, sec… First seen on techcrunch.com Jump to article: techcrunch.com/2024/08/27/chinese-government-hackers-targeted-u-s-internet-providers-with-zero-day-exploit-researchers-say/
-
Chrome Zero-day Vulnerability Actively Exploited in the Wild
Google has announced the release of Chrome 128 to the stable channel for Windows, Mac, and Linux. This update, Chrome 128.0.6613.84 for Linux and 128…. First seen on gbhackers.com Jump to article: gbhackers.com/chrome-zero-day-vulnerability-2/
-
Project Zero: ‘It Will Take All of Us to End The Era of Zero Days’
Tags: zero-dayFirst seen on duo.com Jump to article: duo.com/decipher/project-zero-it-will-take-all-of-us-to-end-the-era-of-zero-days
-
SolarWinds Web Help Desk Vulnerability Possibly Exploited As Zero Day
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36228/SolarWinds-Web-Help-Desk-Vulnerability-Possibly-Exploited-As-Zero-Day.html
-
New Chrome zero-day actively exploited, patch quickly! (CVE-2024-7971)
A new Chrome zero-day vulnerability (CVE-2024-7971) exploited by attackers in the wild has been fixed by Google. About CVE-2024-7971 CVE-2024-7971 is … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/22/cve-2024-7971/
-
Attackers Leverage Zero-Day Cisco Switch Bug
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/attackers-leverage-zero-day-cisco-switch-bug
-
China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches
Hackers gained access to the switch using valid administrator credentials, and then ‘jailbroke’ from the application level into the OS level. The post… First seen on securityweek.com Jump to article: www.securityweek.com/china-linked-velvet-ant-hackers-exploited-zero-day-to-deploy-malware-on-cisco-nexus-switches/
-
China-linked APT Velvet Ant exploited zero-day to compromise Cisco switches
China-linked APT group Velvet Ant exploited a recently disclosed zero-day in Cisco switches to take over the network appliance. Researchers at cyberse… First seen on securityaffairs.com Jump to article: securityaffairs.com/167423/apt/china-velvet-ant-zero-day-cisco-switches.html
-
Google patches ninth Chrome zero-day of 2024
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/google-patches-ninth-chrome-zero-day-of-2024
-
Google addressed the ninth actively exploited Chrome zero-day this year
Google released emergency security updates to fix the ninth actively exploited Chrome zero-day vulnerability this year. ‹‹Google released an emergency… First seen on securityaffairs.com Jump to article: securityaffairs.com/167403/hacking/9th-chrome-zero-day-2024-html.html
-
Lazarus Group Exploits Microsoft Zero-Days CVE-2024-38193, Patch Urgently
Last week, Microsoft addressed multiple high-severity security vulnerabilities in its security updates, some of which have already been exploited by h… First seen on securityonline.info Jump to article: securityonline.info/lazarus-group-exploits-microsoft-zero-days-cve-2024-38193-patch-urgently/
-
Google Patches Sixth Exploited Chrome Zero-Day of 2024
Chrome 128 was released in the stable channel with patches for 38 vulnerabilities, including a V8 JavaScript engine flaw exploited in the wild. The po… First seen on securityweek.com Jump to article: www.securityweek.com/google-patches-sixth-exploited-chrome-zero-day-of-2024/
-
Patched Windows Zero-Day Used in Lazarus Attack
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/patched-windows-zero-day-used-in-lazarus-attack
-
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days
Microsoft on Tuesday shipped fixes to address a total of 90 security flaws, including 10 zero-days, of which six have come under active exploitation i… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-issues-patches-for-90-flaws.html
-
0-day in Windows driver exploited by North Korean hackers to deliver rootkit (CVE-2024-38193)
CVE-2024-38193, an actively exploited zero-day that Microsoft patched earlier this month, has been leveraged by North Korean hackers to install a root… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/20/0-day-in-windows-driver-exploited-by-north-korean-hackers-to-deliver-rootkit-cve-2024-38193/
-
Windows driver zero-day exploited by Lazarus hackers to install rootkit
The notorious North Korean Lazarus hacking group exploited a zero-day flaw in the Windows AFD.sys driver to elevate privileges and install the FUDModu… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-driver-zero-day-exploited-by-lazarus-hackers-to-install-rootkit/