Tag: zero-day
-
Malware im Anmarsch: Schwachstelle in Windows wird aktiv ausgenutzt
Anfällig sind nicht nur Windows 10 und 11, sondern auch Windows Server 2016, 2019 und 2022. Hacker nutzen die Zero-Day-Schwachstelle aus, um Systemrec… First seen on golem.de Jump to article: www.golem.de/news/malware-im-anmarsch-schwachstelle-in-windows-wird-aktiv-ausgenutzt-2405-185134.html
-
Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report
Attackers are getting more sophisticated, better armed, and faster. Nothing in Rapid7’s 2024 Attack Intelligence Report suggests that this will change… First seen on securityweek.com Jump to article: www.securityweek.com/zero-day-attacks-and-supply-chain-compromises-surge-mfa-remains-underutilized-rapid7-report/
-
Google Detects 4th Chrome Zero-Day in May Actively Under Attack – Update ASAP
Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.Assigne… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/google-detects-4th-chrome-zero-day-in.html
-
Over 60% of Network Security Appliance Flaws Exploited as Zero Days
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/network-security-flaws-exploited/
-
Google schließt aktiv genutzte Lücke in Chromium Day-Schwachstelle in Google Chrome und Microsoft Edge
First seen on security-insider.de Jump to article: www.security-insider.de/aktuelle-zero-day-luecke-in-chrome-und-edge-a-0a83278c75562bd3f83bda1b07b0745f/
-
Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days
Microsoft has addressed a total of 61 new security flaws in its software as part of its Patch Tuesday updates for May 2024, including two zero-days wh… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/microsoft-patches-61-flaws-including.html
-
Weitere Zero-Day-Lücke mit Update geschlossen
First seen on heise.de Jump to article: www.heise.de/news/Chrome-Weitere-Zero-Day-Luecke-mit-Update-geschlossen-9720152.html
-
Cisco zero-day flaws in ASA, FTD software under attack
Cisco revealed a nation-state threat campaign dubbed ArcaneDoor exploited two zero-day vulnerabilities in its Adaptive Security Appliance and Firepowe… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366582137/Cisco-zero-day-flaws-in-ASA-FTD-software-under-attack
-
New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation
Google on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild…. First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/new-chrome-zero-day-vulnerability-cve.html
-
Hacker wollen eine 0Day-Lücke bei VPN-Geräten von Zyxel entdeckt haben – Anzeichen für eine Zero-Day-Schwachstelle bei Zyxel-Geräten
First seen on security-insider.de Jump to article: www.security-insider.de/zyxel-vpn-geraete-0-day-schwachstelle-bedrohung-a-ffa1171f68bc8bb60adeb6ceff1ebb95/
-
Critical CrushFTP zero-day vulnerability under attack
While a patch is now available, a critical CrushFTP vulnerability came under attack as a zero-day and could allow attackers to exfiltrate all files on… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366581942/Critical-CrushFTP-zero-day-vulnerability-under-attack
-
PoC Exploit Released for QNAP QTS zero-day RCE Flaw
Researchers have shown a proof-of-concept (PoC) attack for a zero-day remote code execution (RCE) flaw in the QTS operating system from QNAP. Users of… First seen on gbhackers.com Jump to article: gbhackers.com/poc-exploit-released-2/
-
Attacker dwell time down, ransomware up in 2023
Mandiant’s M-Trends 2024 report offered positive signs for global cybersecurity but warned that threat actors are shifting to zero-day exploitation an… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366581738/Mandiant-Attacker-dwell-time-down-ransomware-up-in-2023
-
QNAP QTS zero-day in Share feature gets public RCE exploit
An extensive security audit of QNAP QTS, the operating system for the company’s NAS products, has uncovered fifteen vulnerabilities of varying severit… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qnap-qts-zero-day-in-share-feature-gets-public-rce-exploit/
-
Chrome Zero-Day Alert, Update Your Browser to Patch New Vulnerability
Google on Thursday released security updates to address a zero-day flaw in Chrome that it said has been actively exploited in the wild.Tracked as CVE-… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/chrome-zero-day-alert-update-your.html
-
PoC Exploit Published for 0-day Vulnerability in Google Chrome
A proof-of-concept (PoC) exploit for a critical zero-day vulnerability (CVE-2024-4947) in Google Chrome has been made public. The potential for exploi… First seen on gbhackers.com Jump to article: gbhackers.com/poc-exploit-published-0-day/
-
Zero-Day-Angriff auf norwegische Ministerien
First seen on nsm.no Jump to article: nsm.no/aktuelt/nulldagssarbarhet-i-ivanti-endpoint-manager-mobileiron-core
-
Microsoft Fixes Three Zero-Days in May Patch Tuesday
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-three-zerodays-may24/
-
Mitre breached by nation-state threat actor via Ivanti flaws
An unnamed nation-state threat actor breached Mitre through two Ivanti Connect Secure zero-day vulnerabilities, CVE-2023-46805 and CVE-2024-21887, dis… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366581853/Mitre-breached-by-nation-state-threat-actor-via-Ivanti-flaws
-
CISA adds Google Chrome zero-days to its Known Exploited Vulnerabilities catalog
Tags: browser, chrome, cisa, cybersecurity, exploit, google, infrastructure, kev, vulnerability, zero-dayCISA adds two Chrome zero-day vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agenc… First seen on securityaffairs.com Jump to article: securityaffairs.com/163285/cyber-crime/cisa-google-chrome-zero-day-known-exploited-vulnerabilities-catalog.html
-
Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947)
For the third time in the last seven days, Google has fixed a Chrome zero-day vulnerability (CVE-2024-4947) for which an exploit exists in the wild. A… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/16/cve-2024-4947/
-
Google fixes seventh actively exploited Chrome zero-day this year, the third in a week
Google released security updates to address a new actively exploited Chrome zero-day vulnerability, the third in a week. Google has released a new eme… First seen on securityaffairs.com Jump to article: securityaffairs.com/163238/hacking/7th-chrome-zero-day-2024.html
-
Google patches 3rd Chrome browser zero-day inside of a week
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/google-patches-third-chrome-browser-zero-day-inside-of-a-week
-
How Can Businesses Defend Themselves Against Common Cyberthreats?
TechRepublic consolidated expert advice on how businesses can defend themselves against the most common cyberthreats, including zero-days, ransomware … First seen on techrepublic.com Jump to article: www.techrepublic.com/article/how-to-defend-businesses-against-cyber-threats/
-
Microsoft fixes exploited Qakbot-delivering 0-day in May Patch Tuesday
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/microsoft-fixes-exploited-qakbot-delivering-0-day-in-may-patch-tuesday
-
Apple issues fix for Safara zero-day uncovered in hacking contest
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/apple-issues-fix-for-safara-zero-day-uncovered-in-hacking-contest
-
Third Chrome Zero-Day Patched by Google Within One Week
Google releases Chrome 125 to the stable channel with patches for nine vulnerabilities, including a zero-day. The post eleases Chrome 125 to the stabl… First seen on securityweek.com Jump to article: www.securityweek.com/third-chrome-zero-day-patched-by-google-within-one-week/
-
Microsoft Patch Tuesday security updates for May 2024 fixes 2 actively exploited zero-days
Microsoft Patch Tuesday security updates for May 2024 fixed 59 flaws across various products including an actively exploited zero-day. Microsoft Patch… First seen on securityaffairs.com Jump to article: securityaffairs.com/163172/security/microsoft-patch-tuesday-may-2024.html
-
PoC Exploit Released For D-LINK RCE Zero-Day Vulnerability
Two critical vulnerabilities have been discovered in D-Link DIR-X4860 routers which were associated with Authentication bypass due to HNAP port and re… First seen on gbhackers.com Jump to article: gbhackers.com/d-link-rce-zero-day-exploit-released/