Tag: zero-day
-
New critical Exchange bug exploited as zero-day
Microsoft warned today in an updated security advisory that a critical vulnerability in Exchange Server was exploited as a zero-day before being fixed… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-new-critical-exchange-bug-exploited-as-zero-day/
-
New critical Outlook RCE bug exploited as zero-day
Microsoft updated a security advisory today to warn that a critical Outlook bug was exploited in attacks as a zero-day before being fixed during this … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-new-critical-outlook-rce-bug-exploited-as-zero-day/
-
Water Hydra’s Zero-Day Attack Chain Targets Financial Traders
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/water-hydras-zero-day-financial/
-
Zero Day-Sicherheitslücke in Microsoft Windows SmartScreen
Die Lücke umgeht mit dem SmartScreen ein Sicherheitsfeature aller neueren Windows-Installationen, welches von Microsoft erstmalig mit Windows 8 eingef… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zero-day-sicherheitsluecke-in-microsoft-windows-smartscreen/a36483/
-
Microsoft Fixes Two Zero-Days in February Patch Tuesday
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-two-zerodays-february/
-
Attackers Exploit Microsoft Security-Bypass Zero-Day Bugs
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/attackers-exploit-microsoft-security-bypass-zero-day-bugs
-
Microsoft’s February 2024 Patch Tuesday Fixes 2 Zero-Days
Microsoft’s February 2024 Patch Tuesday is already a fact, bringing forth a number of security updates. This month’s release addresses a total of 73 f… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/microsoft-february-2024-patch-tuesday/
-
February Patch Tuesday corrects two Windows zero-days
Administrators should focus on quickly deploying a critical vulnerability in Microsoft Outlook and exercising caution when applying an Exchange Server… First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366569992/February-Patch-Tuesday-corrects-two-Windows-zero-days
-
Microsoft patches two zero-days for Valentine’s Day
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366569879/Microsoft-patches-two-zero-days-for-Valentines-Day
-
Hackers used new Windows Defender zero-day to drop DarkMe malware
Microsoft has patched today a Windows Defender SmartScreen zero-day exploited in the wild by a financially motivated threat group to deploy the DarkMe… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-used-new-windows-defender-zero-day-to-drop-darkme-malware/
-
Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-february-2024-patch-tuesday-fixes-2-zero-days-73-flaws/
-
Microsoft patches two zero-days exploited by attackers (CVE-2024-21412, CVE-2024-21351)
On February 2024 Patch Tuesday, Microsoft has delivered fixes for 72 CVE-numbered vulnerabilities, including two zero-days (CVE-2024-21412, CVE-2024-2… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/13/cve-2024-21412-cve-2024-21351/
-
Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 74 flaws
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-february-2024-patch-tuesday-fixes-2-zero-days-74-flaws/
-
CISA warns Fortinet zero-day vulnerability under attack
CISA alerted federal agencies that a critical zero-day vulnerability in FortiOS is being actively exploited, though Fortinet has yet to confirm report… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366569675/CISA-warns-Fortinet-zero-day-vulnerability-under-attack
-
Warning: Hackers Exploit 3 Well-known Flaws in Microsoft Word Excel
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
New Ivanti Secure VPN Zero-Day Vulnerabilities and Patches
Read details about the new Ivanti VPN zero-day vulnerabilities, along with the latest information about patches. Most of the exposed VPN appliances ar… First seen on techrepublic.com Jump to article: www.techrepublic.com/article/volexity-ivanti-connect-secure-vpn-vulnerabilities/
-
3 Well-known Microsoft Word Excel Flaws Abused by hackers Widely
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
Fortinet Warns Of New FortiOS Zero Day
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35512/Fortinet-Warns-Of-New-FortiOS-Zero-Day.html
-
Ivanti confirms 2 zero-day vulnerabilities are under attack
Volexity reported the vulnerabilities to Ivanti after discovering that suspected Chinese nation-state threat actors created an exploit chain to achiev… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366565999/Ivanti-confirms-2-zero-day-vulnerabilities-are-under-attack
-
Ivanti zero-day flaws under ‘widespread’ exploitation
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366566482/Ivanti-zero-day-flaws-under-widespread-exploitation
-
Ivanti discloses new zero-day flaw, releases delayed patches
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366568513/Ivanti-discloses-new-zero-day-flaw-releases-delayed-patches
-
New zero-days in Citrix NetScaler ADC, Gateway under attack
The new vulnerabilities come four months after a variety of threat actors exploited the ‘Citrix Bleed’ zero-day flaw in NetScaler ADC and Gateway prod… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366566508/New-zero-days-in-Citrix-NetScaler-ADC-Gateway-under-attack
-
NCC Group records the most ransomware victims ever in 2023
Enterprises faced an alarming number of ransomware attacks as gangs targeted supply chains and took advantage of zero-day vulnerabilities and organiza… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366569338/NCC-Group-records-the-most-ransomware-victims-ever-in-2023
-
Spyware vendors are driving zero-day exploitation
Google’s Threat Analysis Group urged further government action against commercial surveillance vendors that let customers abuse spyware products with … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366569061/Google-Spyware-vendors-are-driving-zero-day-exploitation
-
3 Well-known Microsoft Word & Excel Flaws Abused by hackers Widely
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
Chinese Hackers Exploiting VMware 0-Day Flaw Since 2021
Mandiant and VMware recently uncovered a sophisticated cyber espionage campaign. The attackers, a Chinese group identified as UNC3886, leveraged a kno… First seen on gbhackers.com Jump to article: gbhackers.com/chinese-hackers-vmware-0-day-flaw/
-
Active Scan Alert: Over 28,000 Ivanti Instances Exposed to Internet
Ivanti has disclosed two new zero-day vulnerabilities assigned with CVE-2024-21888 and CVE-2024-21893 in the products Ivanti Connect Secure and Ivanti… First seen on gbhackers.com Jump to article: gbhackers.com/ivanti-flaw-under-attack/
-
Apple and Google Just Patched Their First Zero-Day Flaws of the Year
First seen on wired.com Jump to article: www.wired.com/story/apple-google-zero-day-flaws-critical-update-january-2024/
-
February 2024 Patch Tuesday forecast: Zero days are back and a new server too
January 2024 Patch Tuesday is behind us. A relatively light release from Microsoft with 39 CVEs addressed in Windows 10, 35 in Windows 11, and surpris… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/09/february-2024-patch-tuesday-forecast/
-
Google Patches Chromes Fifth Zero-Day of the Year
First seen on threatpost.com Jump to article: threatpost.com/google-patches-chromes-fifth-zero-day-of-the-year/180432/