Tag: zero-day
-
Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS
Apple documents another zero-day flaw being exploited on older iPhones and documents security problems in macOS, iOS and iPadOS. The post cuments anot… First seen on securityweek.com Jump to article: www.securityweek.com/apple-patch-day-code-execution-flaws-in-iphones-ipads-macos/
-
Apple backports fix for RTKit iOS zero-day to older iPhones
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/apple/apple-backports-fix-for-rtkit-ios-zero-day-to-older-iphones/
-
Google fixes Chrome zero-day with in-the-wild exploit (CVE-2024-4671)
Google has fixed a Chrome zero-day vulnerability (CVE-2024-4671), an exploit for which exists in the wild. About CVE-2024-4671 CVE-2024-4671 is a use … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/10/cve-2024-4671/
-
Microsoft Edge Zero-Day Vulnerability Exploited in the Wild
A zero-day vulnerability in Microsoft Edge, which has been tagged as CVE-2024-4671, has been aggressively exploited by evil organizations, according t… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-edge-zero-day-2/
-
Google fixes fifth actively exploited Chrome zero-day this year
Since the start of the year, Google released an update to fix the fifth actively exploited zero-day vulnerability in the Chrome browser. Google this w… First seen on securityaffairs.com Jump to article: securityaffairs.com/162976/hacking/5th-chrome-zero-day-2024.html
-
Exploited Chrome Zero-Day Patched by Google
A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024. The post 124 update patches t… First seen on securityweek.com Jump to article: www.securityweek.com/exploited-chrome-zero-day-patched-by-google/
-
Google patches fifth Chrome zero-day of 2024
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/google-patches-fifth-chrome-zero-day-of-2024
-
Google fixes fifth Chrome zero-day exploited in attacks this year
‹Google has released a security update for the Chrome browser to fix the fifth zero-day vulnerability exploited in the wild since the start of the yea… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-fixes-fifth-chrome-zero-day-vulnerability-exploited-in-attacks-in-2024/
-
Angreifer plazieren mithilfe neuer 0-Day-Lücke Hintertüren auf Firewalls
First seen on heise.de Jump to article: www.heise.de/news/Cisco-Angreifer-plazieren-mithilfe-neuer-0-Day-Luecke-Hintertueren-auf-Firewalls-9697459.html
-
Warning! Google Chrome Zero-day Vulnerability Exploited in Wild
Google released a critical security update for its Chrome web browser to address attackers exploiting a high-severity vulnerability. The update brings… First seen on gbhackers.com Jump to article: gbhackers.com/warning-google-chrome-zero-day-vulnerability-exploited-in-wild/
-
Google Chrome Zero-day Exploited in the Wild, Patch Now
Google has urgently updated its Chrome browser across all platforms after a critical vulnerability, identified as CVE-2024-4671, was found being activ… First seen on gbhackers.com Jump to article: gbhackers.com/chrome-zero-day-exploited/
-
Palo Alto Networks discloses RCE zero-day vulnerability
Tags: exploit, flaw, injection, network, rce, remote-code-execution, software, threat, vulnerability, zero-dayThreat actors have exploited the remote code injection flaw, which affects the GlobalProtect gateway in Palo Alto Networks’ PAN-OS software, in a ‘lim… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366580732/Palo-Alto-Networks-discloses-RCE-zero-day-vulnerability
-
Microsoft corks Windows zero-day on April Patch Tuesday
The company delivered one of its largest security update releases in recent years with a proxy driver spoofing vulnerability topping the patching prio… First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366580334/Microsoft-corks-Windows-zero-day-on-April-Patch-Tuesday
-
Exploit code for Palo Alto Networks zero-day now public
First seen on theregister.com Jump to article: www.theregister.com/2024/04/17/researchers_exploit_code_for/
-
Über Zero-Day-Schwachstellen: Cisco-Firewalls werden seit Monaten attackiert
Eine zuvor unbekannte Hackergruppe nutzt mindestens seit November 2023 zwei Zero-Day-Schwachstellen in Cisco-Firewalls aus, um Netzwerke zu infiltrier… First seen on golem.de Jump to article: www.golem.de/news/ueber-zero-day-schwachstellen-cisco-firewalls-werden-seit-monaten-attackiert-2404-184540.html
-
Zero-day exploited right now in Palo Alto Networks’ GlobalProtect gateways
First seen on theregister.com Jump to article: www.theregister.com/2024/04/12/palo_alto_pan_flaw/
-
7-Year-Old 0-Day in Microsoft Office Exploited to Drop Cobalt Strike
Hackers are dusting off old tricks! A recent attack exploited vulnerabilities in systems running outdates Microsoft Office to deliver Cobalt Strike ma… First seen on hackread.com Jump to article: www.hackread.com/microsoft-office-0-day-exploited-cobalt-strike/
-
Military Tank Manual, 2017 Zero-Day Anchor Latest Ukraine Cyberattack
The targeted operation utilized CVE-2017-8570 as the initial vector and employed a notable custom loader for Cobalt Strike, yet attribution to any kno… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/military-tank-manual-zero-day-ukraine-cyberattack
-
Breach Roundup: REvil Hacker Gets Nearly 14-Year Sentence
Also: Another Ivanti Zero-Day? And FBI Calls for Strengthening DMARC Policies. This week, REvil hacker sentenced; ZDI saw possible Ivanti-zero-day; FB… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-revil-hacker-gets-nearly-14-year-sentence-a-25002
-
Over 1,400 CrushFTP Instances Vulnerable To Exploited 0-Day
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35818/Over-1-400-CrushFTP-Instances-Vulnerable-To-Exploited-0-Day.html
-
MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws
The MITRE Corporation revealed that it was the target of a nation-state cyber attack that exploited two zero-day flaws in Ivanti Connect Secure applia… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/mitre-corporation-breached-by-nation.html
-
Cisco Zero-Days Anchor ‘ArcaneDoor’ Cyber-Espionage Campaign
Attacks by a previously unknown threat actor leveraged two bugs in firewall devices to install custom backdoors on several government networks globall… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/cisco-zero-days-arcanedoor-cyberespionage-campaign
-
Nation-State Hackers Exploit Cisco Firewall Zero Days To Backdoor Government Networks
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35815/Nation-State-Hackers-Exploit-Cisco-Firewall-Zero-Days-To-Backdoor-Government-Networks.html
-
Verizon DBIR: Cyber Defenders Are Facing Exploit Fatigue
Experts Warn That Human Failures Have Led to Surge in Successful Zero-Day Exploits. Verizon executives warned that cyber defenders are struggling with… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/verizon-dbir-cyber-defenders-are-facing-exploit-fatigue-a-24989
-
Critical Update: CrushFTP Zero-Day Flaw Exploited in Targeted Attacks
Users of the CrushFTP enterprise file transfer software are being urged to update to the latest version following the discovery of a security flaw tha… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-update-crushftp-zero-day-flaw.html
-
Zero-Day Nightmare: Palo Alto, Cisco, and MITRE Under Attack
Zero-day threats continue to wreak havoc on organizations worldwide, with recent attacks targeting corporate and government networks. In the last few … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/zero-day-nightmare-palo-alto-cisco-and-mitre-under-attack/
-
Patch Now: CrushFTP Zero-Day Cloud Exploit Targets US Orgs
An exploit for the vulnerability allows unauthenticated attackers to escape a virtual file system sandbox to download system files and potentially ach… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/patch-crushftp-zero-day-cloud-exploit-targets-us-orgs