Tag: zero-day
-
RCE possible with critical Apache OFBiz zero-day
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/rce-possible-with-critical-apache-ofbiz-zero-day
-
SEC ends probe into MOVEit attacks impacting 95 million people
The SEC concludes its investigation into Progress Software’s handling of the widespread exploitation of a MOVEit Transfer zero-day flaw that exposed d… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sec-ends-probe-into-moveit-attacks-impacting-95-million-people/
-
Windows Zero-day Flaw Let Hackers Downgrade Fully Updated Systems To Old Vulnerabilities
Every software and operating system vendor has been implementing security measures to protect their products. This is due to the fact that threat acto… First seen on gbhackers.com Jump to article: gbhackers.com/windows-zero-day-downgrade/
-
Check Point sheds light on Windows MSHTML zero-day flaw
A Check Point Software Technologies researcher who discovered CVE-2024-38112 said the Windows spoofing vulnerability may have been exploited as far ba… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366593234/Check-Point-sheds-light-on-Windows-MSHTML-zero-day-flaw
-
Feds Drop Probe Into Progress Software Over MOVEit Zero-Day
Clop Ransomware Group Exploited Flaw to Steal Data Pertaining to 95M Individuals. Progress Software said the U.S. Securities and Exchange Commission h… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/feds-drop-probe-into-progress-software-over-moveit-zero-day-a-25983
-
Microsoft fixes 2 zero-days in massive July Patch Tuesday
Microsoft disclosed and patched a whopping 142 vulnerabilities in a busy Patch Tuesday that included two zero-day flaws under active exploitation in t… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366593052/Microsoft-fixes-2-zero-days-in-massive-July-Patch-Tuesday
-
Hyper-V zero-day stands out on a busy Patch Tuesday
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366592779/Hyper-V-zero-day-stands-out-on-a-busy-Patch-Tuesday
-
Google says Android zero-day was exploited in the wild
First seen on therecord.media Jump to article: therecord.media/android-zero-day-google-fix-august-patch
-
Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Why a strong patch management strategy is essential … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/04/week-in-review-vmware-esxi-zero-day-exploited-sms-stealer-malware-targeting-android-users/
-
>>Patchless Patching<< for Zero Days: Qualys Advances Vulnerability Management
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/qualys-rolls-out-patchless-patching-asserts-advantages-for-mssps
-
Japanese space agency spotted zero-day attacks while cleaning up raid on M365
First seen on theregister.com Jump to article: www.theregister.com/2024/07/11/jaxa_m365_zeroday_attacks/
-
kvmCTF: Google’s $250K Bounty for KVM Zero-Day Vulnerabilities
In October 2023, Google announced the launch of kvmCTF, a new vulnerability reward program (VRP) designed to improve the security of the Kernel-based … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/kvmctf-googles-250k-bounty-for-kvm-zero-day-vulnerabilities/
-
VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)
Ransomware operators have been leveraging CVE-2024-37085, an authentication bypass vulnerability affecting Active Directory domain-joined VMware ESXi … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/30/cve-2024-37085-exploited/
-
MoveIt Transfer vulnerability targeted amid disclosure drama
Progress Software’s MoveIt Transfer is under attack again, just one year after a Clop ransomware actor exploited a different zero-day MoveIt flaw agai… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366591974/MoveIt-Transfer-vulnerability-targeted-amid-disclosure-drama
-
Attackers Exploit ‘EvilVideo’ Telegram Zero-Day to Hide Malware
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/attackers-exploit-evilvideo-telegram-zero-day-malware
-
CISA discloses breach of Chemical Security Assessment Tool
CISA first disclosed the breach in March, which stemmed from Ivanti zero-day vulnerabilities that were first exploited in January by a Chinese nation-… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366589568/CISA-discloses-breach-of-Chemical-Security-Assessment-Tool
-
EvilVideo, a Telegram Android zero-day allowed sending malicious APKs disguised as videos
EvilVideo is a zero-day in the Telegram App for Android that allowed attackers to send malicious APK payloads disguised as videos. ESET researchers di… First seen on securityaffairs.com Jump to article: securityaffairs.com/166042/hacking/evilvideo-telegram-android-zero-day.html
-
Critical Microsoft Zero-Day Vulnerability Exploited in the Wild for Over a Year
A severe zero-day vulnerability in Microsoft Windows, tracked as CVE-2024-38112, has been actively exploited by threat actors for at least 18 months. … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/critical-microsoft-zero-day-vulnerability-exploited-in-the-wild-for-over-a-year/
-
Video-spoofing malware distributed via Telegram for Android zero-day
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/video-spoofing-malware-distributed-via-telegram-for-android-zero-day
-
Windows Patchday-Nachlese: MSHTML 0-day-Schwachstelle CVE-2024-38112 durch Malware ausgenutzt
Noch ein kleiner Nachtrag zum Juli 2024 Patchday bei Microsoft. Mit den Sicherheitsupdates hat Microsoft auch eine MSHTML Spoofing-Schwachstelle gesch… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/07/18/windows-patchday-nachlese-mshtml-0-day-schwachstelle-cve-2024-38112-durch-malware-ausgenutzt/
-
Vulnerability in Telegram app for Android allows sending malicious files disguised as videos
ESET researchers discovered a zero-day exploit, which targets the Telegram app for Android, that appeared for sale for an unspecified price in an unde… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/23/telegram-exploit-evilvideo/
-
Telegram Zero-Day Enabled Malware Delivery
The EvilVideo zero-day vulnerability in Telegram for Android allowed threat actors to send malicious files disguised as videos. The post Telegram Zero… First seen on securityweek.com Jump to article: www.securityweek.com/telegram-zero-day-enabled-malware-delivery/
-
Telegram zero-day allowed sending malicious Android APKs as videos
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telegram-zero-day-allowed-sending-malicious-android-apks-as-videos/
-
Telegram zero-day for Android allowed malicious files to masquerade as videos
First seen on therecord.media Jump to article: therecord.media/telegram-zero-day-android-app-eset
-
Black Basta ransomware crew may be exploiting Microsoft zero-day
A Microsoft vulnerability that was addressed without fanfare in March may in fact have been exploited as a zero-day by the notorious Black Basta ranso… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366588814/Black-Basta-ransomware-crew-may-be-exploiting-Microsoft-zero-day
-
Void Banshee APT Exploits Microsoft Zero-Day in Spear-Phishing Attacks
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/void-banshee-apt-microsoft-zero-day-spear-phishing-attacks
-
Void Banshee exploits CVE-2024-38112 zero-day to spread malware
Void Banshee APT group exploited the Windows zero-day CVE-2024-38112 to execute code via the disabled Internet Explorer. An APT group tracked as Void … First seen on securityaffairs.com Jump to article: securityaffairs.com/165832/apt/void-banshee-cve-2024-38112-zero-day-attacks.html
-
RCE flaw and DNS zero-day top list of Patch Tuesday bugs
Tags: authentication, dns, flaw, microsoft, rce, remote-code-execution, update, vulnerability, zero-dayAn RCE vulnerability in a Microsoft messaging feature and a third-party flaw in a DNS authentication protocol are the most pressing issues to address … First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366588458/RCE-flaw-and-DNS-zero-day-top-list-of-Patch-Tuesday-bugs
-
Black Basta might have exploited Microsoft flaw as zero-day
While investigating a ransomware attack, Symantec observed tactics, techniques and procedures that suggest Black Basta threat actors exploited a Micro… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366588641/Black-Basta-may-have-exploited-Microsoft-flaw-as-zero-day
-
Nation-States and Zero-days Cranking Up the Heat
Summertime isn’t just for vacations and barbecues, it’s also prime season for zero-day attacks. These attacks, launched by malicious actors exploiting… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/nation-states-and-zero-days-cranking-up-the-heat/