Tag: zero-day
-
Void Banshee group using patched zero-day to execute infostealer
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/void-banshee-group-using-patched-zero-day-to-execute-infostealer
-
Internet-Explorer wird für Zero-Day-Spoofing-Angriffe missbraucht
Check Point Research (CPR), die Threat-Intelligence-Abteilung von Check Point Software Technologies warnt vor einem neuen Spoofing-Angriff durch Hacke… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/07/11/internet-explorer-wird-fuer-zero-day-spoofing-angriffe-missbraucht/
-
Void Banshee APT exploited >>lingering Windows relic<< in zero-day attacks
The zero-day exploit used to leverage CVE-2024-38112, a recently patched Windows MSHTML vulnerability, was wielded by an APT group dubbed Void Banshee… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/16/cve-2024-38112-void-banshee/
-
Zero-Day Vulnerability Found in VirtualBox: Host Systems at Risk
A new threat has emerged concerning the security of VirtualBox virtual machines (VMs). A threat actor known as Cas has surfaced on BreachForums, revea… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/virtualbox-vm-escape-vulnerability/
-
Attackers Have Been Leveraging Microsoft Zero-Day for 18 Months
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/attackers-have-been-leveraging-microsoft-zero-day-for-18-months
-
Japanese Space Agency Spotted Zero-Day Attacks While Cleaning Up Attack On M365
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36092/Japanese-Space-Agency-Spotted-Zero-Day-Attacks-While-Cleaning-Up-Attack-On-M365.html
-
Threat Actors Exploited Windows 0-Day For More Than A Year Before Microsoft Fixed It
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36093/Threat-Actors-Exploited-Windows-0-Day-For-More-Than-A-Year-Before-Microsoft-Fixed-It.html
-
APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer
The Void Banshee APT exploited the CVE-2024-38112 Windows zero-day to infect systems with the Atlantida stealer. The post APT Exploits Windows Zero-Da… First seen on securityweek.com Jump to article: www.securityweek.com/apt-exploits-windows-zero-day-to-execute-code-via-disabled-internet-explorer/
-
Velvet Ant Exploits Cisco Zero-Day Flaw
Recent events in the cybersecurity landscape have brought to light the activities of a China-nexus cyber espionage group known as Velvet Ant. The thre… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/velvet-ant-exploits-cisco-zero-day-flaw/
-
Week in review: RADIUS protocol critical vuln, Microsoft 0-day exploited for a year, ATT breach
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Hackers stole call, text records of nearly all of AT… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/14/week-in-review-radius-protocol-critical-vuln-microsoft-0-day-exploited-for-a-year-att-breach/
-
Microsoft Fixes Four Zero-Days in July Patch Tuesday
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-four-zerodays-july-patch/
-
Breach Roundup: Microsoft Patches Zero-Day Active Since 2023
Also: Europol Decries Mobile Encryption; FBCS Breach Victim Count Grows. This week, Microsoft and Adobe released patches, Europol pushed back against … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-microsoft-patches-zero-day-active-since-2023-a-25750
-
Four zero days headline hefty July Patch Tuesday drop
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/four-zero-days-headline-hefty-july-patch-tuesday-drop
-
Actively Exploited Microsoft Zero-Days Fixed in July Patch Tuesday
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/actively-exploited-microsoft-zero-days-fixed-in-july-patch-tuesday
-
Microsoft Patch Tuesday for July 2024 fixed 2 actively exploited zero-days
Microsoft Patch Tuesday security updates for July 2024 addressed 139 flaws, including two actively exploited zero-days. Microsoft Patch Tuesday securi… First seen on securityaffairs.com Jump to article: securityaffairs.com/165520/security/microsoft-patch-tuesday-for-july-2024.html
-
Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware
A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deli… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/chinese-hackers-exploiting-cisco.html
-
Zero-day patched by Microsoft has been exploited by attackers for over a year (CVE-2024-38112)
CVE-2024-38112, a spoofing vulnerability in Windows MSHTML Platform for which Microsoft has released a fix on Tuesday, has likely been exploited by at… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/10/cve-2024-38112-cve-2024-38021/
-
Windows MSHTML zero-day used in malware attacks for over a year
Microsoft fixed a Windows zero-day vulnerability that has been actively exploited in attacks for eighteen months to launch malicious scripts while byp… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/windows-mshtml-zero-day-used-in-malware-attacks-for-over-a-year/
-
Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited
Patch Tuesday: Microsoft patches more than 140 security vulnerabilities in the Windows ecosystem, including a pair of exploited zero-days. The post Mi… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-warns-of-windows-hyper-v-zero-day-being-exploited/
-
Microsoft July 2024 Patch Tuesday fixes 142 flaws, 4 zero-days
Today is Microsoft’s July 2024 Patch Tuesday, which includes security updates for 142 flaws, including two actively exploited and two publicly disclos… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-july-2024-patch-tuesday-fixes-142-flaws-4-zero-days/
-
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
For July 2024 Patch Tuesday, Microsoft has released security updates and patches that fix 142 CVEs, including two exploited zero-days (CVE-2024-38080,… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/09/microsoft-fixes-two-zero-days-exploited-by-attackers-cve-2024-38080-cve-2024-38112/
-
CISA Adds Critical Zero-Day Vulnerabilities from July 2024 Patch Tuesday to Exploited List
CISA has added two zero-day vulnerabilities from the cluster of vulnerabilities fixed in this month’s patch Tuesday. In its latest patch Tuesday relea… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/known-exploited-vulnerabilities-catalog/
-
Breaking Down Microsoft’s July 2024 Patch Tuesday: Zero-Days and New Features
On the second Tuesday of July 2024, Microsoft Corporation issued its latest round of security updates, marking another Patch Tuesday update. This mont… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/microsoft-patch-tuesday/
-
Microsoft fixes 2 zero days in massive July Patch Tuesday
Microsoft disclosed and patched a whopping 142 vulnerabilities in a busy Patch Tuesday that included two zero-day flaws under active exploitation in t… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366593052/Microsoft-fixes-2-zero-days-in-massive-July-Patch-Tuesday
-
Patch Now: Cisco Zero-Day Under Fire From Chinese APT
Threat actor Velvet Ant has been exploiting a vulnerability in Cisco’s NX-OS Software for managing a variety of switches, executing commands and dropp… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/patch-now-cisco-zero-day-chinese-apt
-
Google Opens $250K Bug Bounty Contest for VM Hypervisor
If security researchers can execute a guest-to-host attack using a zero-day vulnerability in the KVM open source hypervisor, Google will make it worth… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/google-opens-250k-bug-bounty-contest-for-vm-hypervisor
-
UNC3886 Leverages Zero Days, Novel Backdoor Variants
A new deep-dive investigation into the known UNC3886 gives insight into how the China-linked threat actor operates in a sophisticated, cautious, and e… First seen on duo.com Jump to article: duo.com/decipher/unc3886-leverages-zero-days-novel-backdoor-variants
-
Cisco Patches Zero-Day Bug Used by Chinese Velvet Ant Group
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisco-patches-zeroday-bug-chinese/
-
Ransomware crew may have exploited Windows makeadmin bug as a zero-day
First seen on theregister.com Jump to article: www.theregister.com/2024/06/12/black_basta_ransomware_windows/