Tag: zero-day
-
Threat Actor Claiming of Sandbox Escape RCE in 0-day Google Chrome
Threat Actor has claimed to have discovered a critical zero-day vulnerability in Google Chrome. This exploit, which reportedly enables a sandbox escap… First seen on gbhackers.com Jump to article: gbhackers.com/claiming-sandboxrce-0-day/
-
Novel Cisco NX-OS zero-day leveraged by Chinese hackers
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/novel-cisco-nx-os-zero-day-leveraged-by-chinese-hackers
-
Cisco patches zero-day in NX-OS Nexus switch software
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/cisco-patches-medium-severity-zero-day-in-its-nx-os-nexus-switch-software
-
China-linked APT exploited Cisco NX-OS zero-day to deploy custom malware
Cisco fixed an actively exploited NX-OS zero-day, the flaw was exploited to install previously unknown malware as root on vulnerable switches. Cisco a… First seen on securityaffairs.com Jump to article: securityaffairs.com/165097/apt/cisco-nx-os-zero-day-chinese-hackers.html
-
Google to offer $250,000 for Full VM Escape Zero-day Vulnerability
Google has unveiled kvmCTF, a new vulnerability reward program (VRP) explicitly targeting the Kernel-based Virtual Machine (KVM) hypervisor. This init… First seen on gbhackers.com Jump to article: gbhackers.com/google-zero-day-vulnerability-2/
-
Cisco Patches an Exploited Zero-Day Vulnerability
China-Nexus Hackers Velvet Ant Exploited the Bug in April, Cisco and Sygnia Say. Cisco on Monday patched a zero-day vulnerability discovered months ag… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisco-patches-exploited-zero-day-vulnerability-a-25682
-
Cisco warns of NX-OS zero-day exploited to deploy custom malware
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisco-warns-of-nx-os-zero-day-exploited-to-deploy-custom-malware/
-
Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies
Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant. The post s patched an NX-OS command i… First seen on securityweek.com Jump to article: www.securityweek.com/cisco-patches-nx-os-zero-day-exploited-by-chinese-cyberspies/
-
Hackers Claiming of Sandbox Escape RCE in 0-DAY Google Chrome
Tags: browser, chrome, exploit, google, group, hacker, rce, remote-code-execution, vulnerability, zero-dayA group of hackers has claimed to have discovered a critical zero-day vulnerability in Google Chrome. This exploit, which reportedly enables a sandbox… First seen on gbhackers.com Jump to article: gbhackers.com/claiming-sandboxrce-0-day/
-
Cisco NX-OS Zero-Day Command Injection Vulnerability Let Hackers Gain Root Access
Cisco has disclosed a critical vulnerability in its widely-used NX-OS network operating system that could allow attackers to execute arbitrary command… First seen on gbhackers.com Jump to article: gbhackers.com/cisco-nx-os-zero-day-command-injection-vulnerability/
-
Per Zero-Day-Lücke: Angeblicher Sicherheitsforscher stiehlt Kraken Millionen
Durch eine Schwachstelle konnten sich Nutzer der Kryptoplattform Kraken unrechtmäßig Gelder gutschreiben. Fast 3 Millionen USD sind an den Entdecker u… First seen on golem.de Jump to article: www.golem.de/news/per-zero-day-luecke-angeblicher-sicherheitsforscher-stiehlt-kraken-millionen-2406-186287.html
-
Zero-day vulnerabilities in temperature monitors could leak patient data
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/patchless-temperature-monitor-vulnerabilities-could-leak-patient-data
-
UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html
-
Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw
Crypto exchange Kraken revealed that an unnamed security researcher exploited an extremely critical zero-day flaw in its platform to steal $3 million … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/kraken-crypto-exchange-hit-by-3-million.html
-
Threat Actor Claims 0Day Sandbox Escape RCE in Chrome Browser
A threat actor has claimed to have discovered a zero-day vulnerability in the widely-used Google Chrome browser. The claim was made public via a tweet… First seen on gbhackers.com Jump to article: gbhackers.com/threat-actor-claims-0day-sandbox-escape-rce-in-chrome-browser/
-
Zero-Day Exploits Cheat Sheet: Definition, Examples How It Works
Zero-day exploits use unknown vulnerabilities to infiltrate PCs, networks, mobile phones and IoT devices. For unprepared security teams, these exploit… First seen on techrepublic.com Jump to article: www.techrepublic.com/article/zero-day-exploits-the-smart-persons-guide/
-
Rapid7 warns of alarming zero-day vulnerability trends
The cybersecurity vendor tracked vulnerabilities that were used by threat actors in mass compromise events and found more than half were exploited as … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366585701/Rapid7-warns-of-alarming-zero-day-vulnerability-trends
-
TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability
First seen on theregister.com Jump to article: www.theregister.com/2024/06/05/tiktok_confirms_cnn_accounts_hijacked/
-
Threat Actor Claiming a 0-day in Linux LPE Via GRUB bootloader
A new threat actor has emerged, claiming a zero-day vulnerability in the Linux GRUB bootloader that allows for local privilege escalation (LPE). This … First seen on gbhackers.com Jump to article: gbhackers.com/a-0-day-in-linux-lpe/
-
Exploiting a UseFree Vulnerability in the Linux Kernel: A Zero-Day Threat Emerges
A security threat has surfaced on dark web forums: a zero-day exploit targeting a use-after-free (UAF) vulnerability in the Linux Kernel, specifically… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/use-after-free-vulnerability-in-linux-kernel/
-
Es laufen bereits Angriffe Day-Root-Lücke im Linux-Kernel
First seen on security-insider.de Jump to article: www.security-insider.de/zero-day-root-luecke-im-linux-kernel-a-b51a7c0d86b69b4e63755bae8fba386f/
-
Google Pixel Firmware Zero-Day Flaw Exploited And Patched
Google has recently issued a warning regarding a critical security flaw affecting Google Pixel Firmware, which has been actively exploited as a zero-d… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/google-pixel-firmware-zero-day-flaw-exploited-and-patched/
-
Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day
Google has warned that a security flaw impacting Pixel Firmware has been exploited in the wild as a zero-day.The high-severity vulnerability, tagged a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/google-warns-of-pixel-firmware-security.html
-
Chinese UNC3886 Actors Exploiting VMware, Fortinet 0-days For Spying
In 2021, UNC3886, a suspected China nexus cyber espionage actor, was found to be targeting strategic organizations on a large scale, utilizing multipl… First seen on gbhackers.com Jump to article: gbhackers.com/unc3886-exploit-vmware-fortinet/
-
Multiple zero-days, persistence mechanisms leveraged in Chinese cyberespionage operations
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/multiple-zero-days-persistence-mechanisms-leveraged-in-chinese-cyberespionage-operations
-
Alleged researchers stole $3 million from Kraken exchange
Alleged researchers have exploited a zero-day in Kraken crypto exchange to steal $3 million worth of cryptocurrency. Kraken Chief Security Officer Nic… First seen on securityaffairs.com Jump to article: securityaffairs.com/164694/hacking/kraken-zero-day-cyber-theft.html
-
Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw
Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Re… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/black-basta-ransomware-may-have.html
-
Google’s Zero-Day Hunters Test AI for Security Research
Project Zero Framework Aims to Boost AI Bug Detection Skills. Google’s team of zero-day hunters say artificial intelligence can lead to improved autom… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/googles-zero-day-hunters-test-ai-for-security-research-a-25592
-
Microsoft, Late to the Game on Dangerous DNSSEC Zero-Day Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-late-dangerous-dnssec-zero-day-flaw
-
Cryptohack Roundup: Kraken, CertiK Feud Over Zero-Day, $3M
Tags: zero-dayAlso: UwU Lend’s Hacks, Terraform Labs’ Dissolution, Gemini’s Settlement. This week, CertiK researchers allegedly stole money from Kraken, UwU Lend wa… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-kraken-certik-feud-over-zero-day-3m-a-25583