Tag: zero-day
-
Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included
Microsoft has released security updates for the month of April 2024 to remediate a record 149 flaws, two of which have come under active exploitation … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/microsoft-fixes-149-flaws-in-huge-april.html
-
Palo Alto Patches 0-Day (CVE-2024-3400) Exploited by Python Backdoor
First seen on hackread.com Jump to article: www.hackread.com/palo-alto-patche-0-day-cve-2024-3400-python-backdoor/
-
Apple Fixes Actively Exploited Zero-Days in iOS (CVE-2024-23225)
Apple has taken measures to address two zero-day vulnerabilities detected in iOS, which were actively exploited in the wild. The tech giant promptly i… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-23225-ios/
-
Mozilla fixes $100,000 Firefox zero-days following two-day hackathon
First seen on theregister.com Jump to article: www.theregister.com/2024/03/25/mozilla_fixes_firefox_zerodays/
-
Trust Wallet Urges Caution for Apple Users Amid Reports of Apple iMessage Zero-Day Exploit
Trust Wallet, a leading provider of crypto wallets, has issued an advisory to Apple users regarding potential iMessage vulnerability. The warning stem… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/ios-imessage-vulnerability/
-
APT Just Means Another Path Traversal
New Zero Day in Palo Alto GlobalProtect VPN Appliances Introduction On April 12th, Volexity announced they discovered zero day exploitation occurring … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/apt-just-means-another-path-traversal/
-
Microsoft Patches 2 Zero Days Exploited For Malware Delivery
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35765/Microsoft-Patches-2-Zero-Days-Exploited-For-Malware-Delivery.html
-
Threat actors exploited Palo Alto Pan-OS issue to deploy a Python Backdoor
Threat actors have been exploiting the recently disclosed zero-day in Palo Alto Networks PAN-OS since March 26, 2024. Palo Alto Networks and Unit 42 a… First seen on securityaffairs.com Jump to article: securityaffairs.com/161844/apt/palo-alto-pan-os-python-backdoor.html
-
Microsoft Patch Tuesday Tsunami: No Zero-Days, but an Asterisk
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-patch-tuesday-no-zero-days-but-one-under-active-exploit
-
Week in review: Palo Alto Networks firewalls under attack, Microsoft patches two exploited zero-days
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Palo Alto Networks firewalls under attack, hotfixes … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/14/week-in-review-palo-alto-networks-firewalls-under-attack-microsoft-patches-two-exploited-zero-days/
-
Likely State Hackers Exploiting Palo Alto Firewall Zero-Day
Company Released a Hotfix to the Command Injection Vulnerability. Firewall appliance manufacturer Palo Alto Networks rushed out a hotfix Friday to a c… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/likely-state-hackers-exploiting-palo-alto-firewall-zero-day-a-24866
-
Palo Alto Networks fixes zero-day exploited to backdoor firewalls
Palo Alto Networks has started releasing hotfixes for a zero-day vulnerability that has been actively exploited since March 26th to backdoor PAN-OS fi… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-fixes-zero-day-exploited-to-backdoor-firewalls/
-
Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws
Multiple China-nexus threat actors have been linked to the zero-day exploitation of three security flaws impacting Ivanti appliances (CVE-2023-46805, … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/researchers-identify-multiple-china.html
-
Palo Alto Networks Warns About Critical Zero-Day in PAN-OS
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/palo-alto-critical-zero-day/
-
Alert! Palo Alto RCE Zero-day Vulnerability Actively Exploited in the Wild
In a recent security bulletin, Palo Alto Networks disclosed a critical vulnerability in its GlobalProtect Gateway, identified as CVE-2024-3400. This f… First seen on gbhackers.com Jump to article: gbhackers.com/alert-palo-alto-rce-zero-day-vulnerability-actively-exploited-in-the-wild/
-
Palo Alto Networks Releases Fixes for Firewall Zero-Day as Attribution Attempts Emerge
Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The post … First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-releases-fixes-for-firewall-zero-day-as-first-attribution-attempts-emerge/
-
State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls
A state-sponsored threat actor has been exploiting a zero-day in Palo Alto Networks firewalls for the past two weeks. The post sponsored threat actor … First seen on securityweek.com Jump to article: www.securityweek.com/state-sponsored-hackers-exploit-zero-day-to-backdoor-palo-alto-networks-firewalls/
-
Palo Alto Networks zero-day exploited since March to backdoor firewalls
Suspected state-sponsored hackers have been exploiting a zero-day vulnerability in Palo Alto Networks firewalls tracked as CVE-2024-3400 since March 2… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-zero-day-exploited-since-march-to-backdoor-firewalls/
-
Palo Alto Networks PAN-OS critical 0-day exploited; no patch yet
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/palo-alto-networks-pan-os-critical-0-day-exploited-no-patch-yet
-
Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies
Google has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies.The high-se… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/google-warns-android-zero-day-flaws-in.html
-
Telegram fixes Windows app zero-day used to launch Python scripts
Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Pyt… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telegram-fixes-windows-app-zero-day-used-to-launch-python-scripts/
-
Another CVE (PAN-OS Zero-Day), Another Reason to Consider Zero Trust
A Year of Critical Zero Days: Firewalls, VPNs, and more This past year has been, in many ways, the year of zero-day vulnerabilities for externally ex… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/another-cve-pan-os-zero-day-another-reason-to-consider-zero-trust/
-
Company Offering 30 Million For Android, iOS, Browser Zero-Day Exploits
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35758/Company-Offering-30-Million-For-Android-iOS-Browser-Zero-Day-Exploits.html
-
Wie Hacker mit Sicherheitslücken Millionen verdienen und wer sie dafür bezahlt
Für viele sind Sicherheitslücken in Whatsapp, Google Chrome und iMessage gefährlich. Doch Hacker:innen können mit Zero-Day-Exploits Millionen verdiene… First seen on t3n.de Jump to article: t3n.de/news/wie-hacker-mit-sicherheitsluecken-millionen-verdienen-und-wer-sie-dafuer-bezahlt-1617682/
-
Palo Alto Networks warns of PAN-OS firewall zero-day used in attacks
Today, Palo Alto Networks warns that an unpatched critical command injection vulnerability in its PAN-OS firewall is being actively exploited in attac… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-firewall-zero-day-used-in-attacks/
-
Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge
Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The post … First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-releases-fixes-for-firewall-zero-day-as-first-attribution-attempts-emerge/
-
Microsoft fixed two zero-day bugs exploited in malware attacks
Microsoft addressed two zero-day vulnerabilities (CVE-2024-29988 and CVE-2024-26234) actively exploited by threat actors to deliver malware Microsoft … First seen on securityaffairs.com Jump to article: securityaffairs.com/161692/security/two-zero-day-malware-attacks.html
-
Telegram fixes Windows app zero-day caused by file extension typo
Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Pyt… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telegram-fixes-windows-app-zero-day-caused-by-file-extension-typo/