Tag: zero-day
-
Microsoft Zero-Day CVE-2024-38193 was exploited by North Korea-linked Lazarus APT
Microsoft addressed a zero-day vulnerability actively exploited by the North-Korea-linked Lazarus APT group. Microsoft has addressed a zero-day vulner… First seen on securityaffairs.com Jump to article: securityaffairs.com/167246/apt/microsoft-zero-day-cve-2024-38193-lazarus.html
-
Microsoft Patches 9 Zero Days, 6 Exploited In The Wild
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36216/Microsoft-Patches-9-Zero-Days-6-Exploited-In-The-Wild.html
-
Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-discloses-10-zero-day-bugs-in-pacth-tuesday-update
-
North Korea Exploited Windows Zero-Day to Deploy Fudmodule
Lazarus Espionage Group’s Sophisticated Malware Evades Antivirus Monitoring. North Korea’s Lazarus hacking team, which focuses on cryptocurrency theft… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/north-korea-exploited-windows-zero-day-to-deploy-fudmodule-a-26076
-
Windows Zero-Day Attack Linked to North Korea’s Lazarus APT
The vulnerability, tracked as CVE-2024-38193 and marked as ‘actively exploited’ by Microsoft, allows SYSTEM privileges on the latest Windows operating… First seen on securityweek.com Jump to article: www.securityweek.com/windows-zero-day-attack-linked-to-north-koreas-lazarus-apt/
-
Lazarus Hacker Group Exploited Microsoft Windows Zero-day
The notorious Lazarus hacker group has been identified as exploiting a zero-day vulnerability in Microsoft Windows, specifically targeting the Windows… First seen on gbhackers.com Jump to article: gbhackers.com/lazarus-microsoft-zero-day/
-
Microsoft Patched 6 Actively Exploited Zero-Day Flaws
Patch Tuesday brought updates for 90 security vulnerabilities, including patching severe remote code execution vulnerabilities and closing some doors … First seen on techrepublic.com Jump to article: www.techrepublic.com/article/microsoft-zero-day-vulnerabilities-exploited/
-
Copy2Pwn Zero-Day Exploited to Bypass Windows Protections
ZDI details a zero-day named Copy2Pwn and tracked as CVE-2024-38213, which cybercriminals exploited to bypass MotW protections in Windows. The post Co… First seen on securityweek.com Jump to article: www.securityweek.com/copy2pwn-zero-day-exploited-to-bypass-windows-protections/
-
SolarWinds Web Help Desk Vulnerability Possibly Exploited as Zero-Day
The US cybersecurity agency CISA warns that a recent SolarWinds Web Help Desk vulnerability has been exploited in the wild. The post SolarWinds Web He… First seen on securityweek.com Jump to article: www.securityweek.com/solarwinds-web-help-desk-vulnerability-possibly-exploited-as-zero-day/
-
Microsoft Fixes Nine Zero-Days on Patch Tuesday
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-fixes-nine-zerodays/
-
Microsoft patches 9 zero-days, 6 exploited in the wild
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/microsoft-patches-9-zero-days-6-exploited-in-the-wild
-
Contrast Security Introduces ADR to Help Organisations Combat Zero Days and Secure Applications from Within
While many organisations can defend against published application vulnerabilities, they often neglect to build security into the application productio… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/08/07/contrast-security-introduces-adr-to-help-organisations-combat-zero-days-and-secure-applications-from-within
-
Microsoft’s August 2024 Patch Tuesday Addresses 10 Zero-Days, 6 Exploited
On Aug. 13, 2024, Microsoft released its latest batch of security updates as part of its Patch Tuesday program, addressing a total of 89 vulnerabiliti… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/microsofts-august-2024-patch-tuesday-addresses-10-zero-days-6-exploited/
-
Microsoft fixes 6 zero-days under active attack
August 2024 Patch Tuesday is here, and Microsoft has delivered fixes for 90 vulnerabilities, six of which have been exploited in the wild as zero-days… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/13/microsoft-zero-days-under-attack/
-
New Windows SmartScreen bypass exploited as zero-day since March
Today, Microsoft revealed that a Mark of the Web security bypass vulnerability exploited by attackers as a zero-day to bypass SmartScreen protection w… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/new-windows-smartscreen-bypass-exploited-as-zero-day-since-march/
-
Microsoft Tackles 9 Zero-Day Exploits in August 2024 Patch Tuesday Update
Microsoft has released its August 2024 Patch Tuesday update, addressing multiple vulnerabilities across its software ecosystem. This month’s update fe… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/microsoft-august-2024-patch-tuesday/
-
New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution
A new zero-day pre-authentication remote code execution vulnerability has been disclosed in the Apache OFBiz open-source enterprise resource planning … First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/new-zero-day-flaw-in-apache-ofbiz-erp.html
-
Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited
Today is Microsoft’s August 2024 Patch Tuesday, which includes security updates for 89 flaws, including six actively exploited and three publicly disc… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-august-2024-patch-tuesday-fixes-9-zero-days-6-exploited/
-
August Patch Pileup: Microsoft’s Zero-Day Doozy Dump
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/august-2024-patch-tuesday-richixbw/
-
Microsoft Warns of Six Windows Zero-Days Being Actively Exploited
Microsoft’s security response team pushed out documentation for almost 90 vulnerabilities across Windows and OS components and marked several flaws in… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-warns-of-six-windows-zero-days-being-actively-exploited/
-
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Day Exploits
Microsoft on Tuesday shipped fixes to address a total of 90 security flaws, including 10 zero-days, of which six have come under active exploitation i… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-issues-patches-for-90-flaws.html
-
Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200)
A new MS Office zero-day vulnerability (CVE-2024-38200) can be exploited by attackers to grab users’ NTLM hashes, Microsoft has shared late last week…. First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/12/cve-2024-38200/
-
CVE-2024-38856: Pre-Auth RCE Vulnerability in Apache OFBiz
IntroductionOn August 5, 2024, researchers at SonicWall discovered a zero-day security flaw in Apache OFBiz tracked as CVE-2024-38856. The vulnerabili… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/cve-2024-38856-pre-auth-rce-vulnerability-in-apache-ofbiz/
-
Five zero-days impacts EoL Cisco Small Business IP Phones. Replace them with newer models asap!
Cisco warns of critical remote code execution zero-day vulnerabilities impacting end-of-life Small Business SPA 300 and SPA 500 series IP phones. Cisc… First seen on securityaffairs.com Jump to article: securityaffairs.com/166811/uncategorized/zero-days-eof-small-business-ip-phones.html
-
Cisco warns of critical RCE zero-days in end of life IP phones
Cisco is warning of multiple critical remote code execution zero-days in the web-based management interface of the end-of-life Small Business SPA 300 … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisco-warns-of-critical-rce-zero-days-in-end-of-life-ip-phones/
-
Zero Day Inititave findet Lücken in Deep Sea Electronics DSE855 Day-Schwachstellen in Embedded Device
First seen on security-insider.de Jump to article: www.security-insider.de/trend-micro-zdi-bericht-dse855-schwachstellen-a-d8ad58d9815c0f76ef3861a7e18b215f/
-
>>Perfect<< Windows downgrade attack turns fixed vulnerabilities into zero-days
A researcher has developed a downgrade attack that can make Windows machines covertly, persistently and irreversibly vulnerable, even if they were ful… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/08/windows-downgrade-attack/
-
Microsoft discloses Office zero-day, still working on a patch
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-discloses-office-zero-day-still-working-on-a-patch/