Tag: zero-day
-
Researchers exploit Kraken exchange bug, steal $3 million in crypto
The Kraken crypto exchange disclosed today that alleged security researchers exploited a zero-day website bug to steal $3 million in cryptocurrency an… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/researchers-exploit-kraken-exchange-bug-steal-3-million-in-crypto/
-
Microsoft handles 2 Windows zero-days on May Patch Tuesday
In addition to the Windows vulnerabilities exploited in the wild, admins should focus on patching multiple flaws in web browsers from Google, Microsof… First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366585000/Microsoft-handles-2-Windows-zero-days-on-May-Patch-Tuesday
-
Zero-day flaw in Check Point VPNs is ‘extremely easy’ to exploit
First seen on techcrunch.com Jump to article: techcrunch.com/2024/05/30/check-point-vpn-zero-day-extremely-easy-to-exploit/
-
Google discloses 2 zero-day vulnerabilities in less than a week
Google released fixed versions to address the two vulnerabilities in its Chrome web browser, but the updates will roll out in stages with no specific … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366585317/Google-discloses-2-zero-day-vulnerabilities-in-less-than-a-week
-
Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers
Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.Tracked as CVE-2024-4… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/arm-warns-of-actively-exploited-zero.html
-
Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html
-
Zero Day: GPT-4 kann selbstständig Sicherheitslücken ausnutzen
Tags: zero-dayFirst seen on golem.de Jump to article: www.golem.de/news/zero-day-gpt-4-kann-selbststaendig-sicherheitsluecken-ausnutzen-2406-185875.html
-
Microsoft Patches One Critical and One Zero-Day Vulnerability
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-patches-critica-zeroday/
-
Black Basta Ransomware Suspected of Exploiting Windows 0-day Before Patch
cybersecurity researchers at Symantec have found strong evidence suggesting that the Black Basta ransomware gang exploited a critical Windows vulnerab… First seen on hackread.com Jump to article: hackread.com/black-basta-ransomware-windows-0-day-patch/
-
Only one critical vulnerability included in May’s Microsoft Patch Tuesday; One other zero-day in DWN Core
First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/microsoft-patch-tuesday-may-2024/
-
Google fixed an actively exploited zero-day in the Pixel Firmware
Google is warning of a security vulnerability impacting its Pixel Firmware that has been actively exploited in the wild as a zero-day. Google warned o… First seen on securityaffairs.com Jump to article: securityaffairs.com/164500/security/google-fixed-pixel-firmware-zero-day.html
-
Ivanti EPM SQL Injection Flaw Let Attackers Execute Remote Code
In May 24, 2024, Zero-Day Initiative released a security advisory for Ivanti EPM which was associated with SQL injection Remote code execution vulnera… First seen on gbhackers.com Jump to article: gbhackers.com/ivanti-epm-sql-injection-rce-vulnerability/
-
GenAI keeps cybersecurity pros on high alert
Businesses across every industry face unprecedented challenges posed by an increasing attack surface, zero-day vulnerabilities, cloud misconfiguration… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/13/businesses-ai-threats/
-
Microsoft Patch Tuesday security updates for June 2024 fixed only one critical issue
Microsoft Patch Tuesday security updates for June 2024 addressed 49 vulnerabilities, only one of them is a publicly disclosed zero-day flaw. Microsoft… First seen on securityaffairs.com Jump to article: securityaffairs.com/164442/security/microsoft-patch-tuesday-june-2024.html
-
Surge in Attacks Against Edge and Infrastructure Devices
Increase in Known Vulnerabilities and Zero-Days Is Fueling Mass Hacking Campaigns. Attackers are increasingly targeting cybersecurity devices deployed… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/surge-in-attacks-against-edge-infrastructure-devices-a-25525
-
Google patches exploited Android zero-day on Pixel devices
Google has released patches for 50 security vulnerabilities impacting its Pixel devices and warned that one of them had already been exploited in targ… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-patches-exploited-android-zero-day-on-pixel-devices/
-
Attacks Surge on Check Point’s Recent VPN Zero-Day Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/attacks-surge-on-check-points-recent-vpn-zero-day-flaw
-
Arm zero-day in Mali GPU Drivers actively exploited in the wild
Semiconductor and software design company Arm warns of an actively exploited zero-day vulnerability in Mali GPU Kernel Driver. Arm is warning of an ac… First seen on securityaffairs.com Jump to article: securityaffairs.com/164430/hacking/arm-zero-day-actively-exploited.html
-
Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation
The zero-day is tagged as CVE-2024-32896 and described as an elevation of privilege issue in Pixel Firmware. The post -day is tagged as CVE-2024-32896… First seen on securityweek.com Jump to article: www.securityweek.com/google-warns-of-pixel-firmware-zero-day-under-limited-targeted-exploitation/
-
Neue Schwachstelle in Windows wird bereits ausgenutzt – So enttarnten Security-Experten eine Zero-Day-Schwachstelle in Windows
First seen on security-insider.de Jump to article: www.security-insider.de/kaspersky-entdeckt-zero-day-schwachstelle-in-windows-2024-a-bf1218123e4872260afea62685df983f/
-
Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day
The Black Basta ransomware gang may have exploited the Windows privilege escalation flaw CVE-2024-26169 before it was patched. The post k Basta ransom… First seen on securityweek.com Jump to article: www.securityweek.com/ransomware-group-may-have-exploited-windows-vulnerability-as-zero-day/
-
China Using Hacking Competitions to Develop Domestic Talent
Government Nurtures Homegrown Talent and Hack-for-Hire Ecosystem, Research Finds. China boasts many of the world’s most talented zero-day vulnerabilit… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/china-using-hacking-competitions-to-develop-domestic-talent-a-25512
-
Black Basta ransomware gang linked to Windows zero-day attacks
The Cardinal cybercrime group (Storm-1811, UNC4394), who are the main operators of the Black Basta ransomware, is suspected of exploiting a Windows pr… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/black-basta-ransomware-gang-linked-to-windows-zero-day-attacks/
-
Google warns of actively exploited Pixel firmware zero-day
Google has released patches for 50 security vulnerabilities impacting its Pixel devices and warned that one of them had already been exploited in targ… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-warns-of-actively-exploited-pixel-firmware-zero-day/
-
Check Point Warning: VPN Gateway Products’ Zero-Day Attack
Check Point has issued an alert regarding a critical zero-day vulnerability identified in its Network Security gateway products. As per the Check Poin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/check-point-warning-vpn-gateway-products-zero-day-attack/
-
Black Basta may have exploited Microsoft flaw as zero-day
While investigating a ransomware attack, Symantec observed tactics, techniques and procedures that suggest Black Basta threat actors exploited a Micro… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366588641/Black-Basta-may-have-exploited-Microsoft-flaw-as-zero-day
-
Check Point Releases Fix For Zero-Day VPN Flaw
The flaw (CVE-2024-24919) could enable attackers to read certain information on Gateways if they are connected to the Internet and enabled with Remote… First seen on duo.com Jump to article: duo.com/decipher/check-point-releases-fix-for-exploited-vpn-flaw
-
Talos discloses multiple zero-day vulnerabilities, two of which could lead to code execution
Two vulnerabilities in this group, one in the Tinyroxy HTTP proxy daemon and another in the stb_vorbis.c file library, could lead to arbitrary code ex… First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/vulnerability-roundup-zero-days-may-8-2024/
-
Google patches its fifth zero-day vulnerability of the year in Chrome
First seen on arstechnica.com Jump to article: arstechnica.com/
-
In Other News: TikTok Zero-Day, DMM Bitcoin Hack, Free VPN App Analysis
Noteworthy stories that might have slipped under the radar: TikTok patches account hijacking zero-day, $300 million DMM Bitcoin hack, free Android VPN… First seen on securityweek.com Jump to article: www.securityweek.com/in-other-news-tiktok-zero-day-dmm-bitcoin-hack-free-vpn-app-analysis/