Tag: zero-day
-
Apple patches zero-days amid foundational post-quantum update
Apples iOS 17.4 update not only fixes zero-day flaws that are being actively exploited, but includes important new security protocols to safeguard use… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366572533/Apple-patches-zero-days-amid-foundational-post-quantum-update
-
Recent DarkGate campaign exploited Microsoft Windows zero-day
Researchers recently uncovered a DarkGate campaign in mid-January 2024, which exploited Microsoft zero-day vulnerability. Researchers at the Zero Day … First seen on securityaffairs.com Jump to article: securityaffairs.com/160457/malware/recent-darkgate-campaign-exploited-microsoft-zero-day.html
-
Hackers Exploit Windows SmartScreen Vulnerability to Install DarkGate Malware
The operators of DarkGate successfully leveraged a patched Windows Defender SmartScreen vulnerability, identified as CVE-2024-21412, as a zero-day att… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-exploit-windows-smartscreen/
-
DarkGate Malware Exploits Recently Patched Microsoft Flaw in Zero-Day Attack
A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus sof… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/darkgate-malware-exploits-recently.html
-
Response to ScreenConnect’s Recent Zero-day Vulnerability Exploitation
AttackIQ has released a new assessment template in response to the recent wave of zero-day vulnerability exploits affecting ConnectWise’s ScreenConnec… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/response-to-screenconnects-recent-zero-day-vulnerability-exploitation/
-
AnyCubic fixes exploited 3D printer zero day flaw with new firmware
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/anycubic-fixes-exploited-3d-printer-zero-day-flaw-with-new-firmware/
-
Hackers Exploiting iOS 0-Day To Attack iPhones Patch Now!
Apple releases emergency fixes to address two new zero-day vulnerabilities in iOS that impact iPhones. The two zero-day vulnerabilities were discovere… First seen on gbhackers.com Jump to article: gbhackers.com/ios-0-day-attack-patch-now/
-
Patch Now: Apple Zero-Day Exploits Bypass Kernel Security
A pair of critical bugs could open the door to complete system compromise, including access to location information, iPhone camera and mic, and messag… First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/patch-now-apple-zero-day-exploits-bypass-kernel-security
-
Apple Blunts Zero Day Attacks With iOS 17.4 Update
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35621/Apple-Blunts-Zero-Day-Attacks-With-iOS-17.4-Update.html
-
Apple fixes two actively exploited iOS zero-days (CVE-2024-23225, CVE-2024-23296)
Apple has fixed two iOS zero-day vulnerabilities (CVE-2024-23225, CVE-2024-23296) exploited by attackers in the wild. CVE-2024-23225 and CVE-2024-2329… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/03/06/cve-2024-23225-cve-2024-23296/
-
Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws
Apple has released security updates to address several security flaws, including two vulnerabilities that it said have been actively exploited in the … First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/urgent-apple-issues-critical-updates.html
-
Hackers Exploited Windows 0-Day For 6 Months After Microsoft Knew About It
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35611/Hackers-Exploited-Windows-0-Day-For-6-Months-After-Microsoft-Knew-About-It.html
-
Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks
The notorious Lazarus Group actors exploited a recently patched privilege escalation flaw in the Windows Kernel as a zero-day to obtain kernel-level a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/lazarus-hackers-exploited-windows.html
-
Zero-Day Alert: Thousands of Cisco IOS XE Systems Now Compromised
Just a day after Cisco disclosed CVE-2023-20198, it remains unpatched, and one vendor says a Shodan scan shows at least 10,000 Cisco devices with an i… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/ten-thousand-cisco-ios-xe-systems-compromised-zero-day-bug
-
Critical, Unpatched Cisco Zero-Day Bug Is Under Active Exploit
No patch or workaround is currently available for the maximum severity flaw, which allows attackers to gain complete administrator privilege on affect… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/critical-unpatched-cisco-zero-day-bug-active-exploit
-
Trotz aktiver Ausnutzung: Microsoft patcht Windows-Kernel-Bug erst nach 6 Monaten
Schon seit August 2023 hat Microsoft wohl gewusst, dass eine erst kürzlich gepatchte Zero-Day-Schwachstelle in Windows von prominenten Hackern aktiv a… First seen on golem.de Jump to article: www.golem.de/news/trotz-aktiver-ausnutzung-microsoft-patcht-windows-kernel-bug-erst-nach-6-monaten-2403-182810.html
-
Windows Kernel bug fixed last month exploited as zero-day since August
Microsoft patched a high-severity Windows Kernel privilege escalation vulnerability in February, six months after being informed that the flaw was bei… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/windows-kernel-bug-fixed-last-month-exploited-as-zero-day-since-august/
-
Microsoft Zero-Day Used by Lazarus in Rootkit Attack
North Korean state actors Lazarus Group used a Windows AppLocker zero-day, along with a new and improved rootkit, in a recent cyberattack, researchers… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-zero-day-used-by-lazarus-in-rootkit-attack
-
Microsoft Zero Day Used by Lazarus in Rootkit Attack
North Korean state actors Lazarus Group used a Windows AppLocker zero day, along with a new and improved rootkit, in a recent cyberattack, researchers… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-zero-day-used-by-lazarus-in-rootkit-attack
-
Windows Zero Day Exploited By North Korean Hackers In Rootkit Attack
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35596/Windows-Zero-Day-Exploited-By-North-Korean-Hackers-In-Rootkit-Attack.html
-
Lazarus Hackers Exploited Windows 0-Day to Gain Kernel read/write Access
The Lazarus Group, a well-known cybercriminal organization, has recently exploited a zero-day vulnerability in Windows to gain kernel privileges, a cr… First seen on gbhackers.com Jump to article: gbhackers.com/lazarus-hackers-exploited-windows-0-day/
-
Lazarus hackers exploited Windows zero-day to gain Kernel privileges
North Korean threat actors known as the Lazarus Group exploited a flaw in the Windows AppLocker driver (appid.sys) as a zero-day to gain kernel-level … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-gain-kernel-privileges/
-
Ads for Zero-Day Exploit Sales Surge 70% Annually
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ads-zeroday-exploit-sales-surge-70/
-
Outlook Users Beware 0-Day Exploit Released On Hacking Forums
Outlook has identified a security flaw that affects how it handles certain hyperlinks. Malware actors actively exploit the vulnerability in real-worl… First seen on gbhackers.com Jump to article: gbhackers.com/outlook-exploit-warning-0-day/
-
Recent Zero Day Could Impact Up To 97k Microsoft Exchange Servers
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35558/Recent-Zero-Day-Could-Impact-Up-To-97k-Microsoft-Exchange-Servers.html
-
Week in review: AnyDesk phishing campaign targets employees, Microsoft fixes exploited zero-days
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Integrating cybersecurity into vehicle design and ma… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/18/week-in-review-anydesk-phishing-campaign-targets-employees-microsoft-fixes-exploited-zero-days/
-
New Outlook 0-day RCE Flaw Exploited in the Wild
Outlook has been discovered to have an interesting vulnerability while handling specific hyperlinks, which was found to be exploited by threat actors … First seen on gbhackers.com Jump to article: gbhackers.com/outlook-0-day-rce-flaw/
-
Microsoft Exchange Server Flaw Exploited as a Zero-Day Bug
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/microsoft-exchange-server-flaw-exploited-zero-day-bug
-
Microsoft Patch Tuesday 2024: 73 Security Flaws, Including Two 0-Days Patched
As part of its February 2024 Patch Tuesday updates, Microsoft has published patches to address 73 security flaws, including two zero-day vulnerabiliti… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-patch-tuesday-2024/