Tag: zero-day
-
Definition ZDI | Zero Day Initiative – Was ist die Zero Day Initiative?
Tags: zero-dayFirst seen on security-insider.de Jump to article: www.security-insider.de/definition-zero-day-initiative-zdi-a-fd51e987841cb77b2bb482be1000bd8e/
-
Week in review: Two Cisco ASA zero-days exploited, MITRE breach, GISEC Global 2024
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Hackers backdoored Cisco ASA devices via two zero-da… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/28/week-in-review-two-cisco-asa-zero-days-exploited-mitre-breach-gisec-global-2024/
-
Over 1,400 CrushFTP Instances Vulnerable to Exploited Zero-Day
More than 1,400 CrushFTP servers remain vulnerable to an actively exploited zero-day for which PoC has been published. The post n 1,400 CrushFTP serve… First seen on securityweek.com Jump to article: www.securityweek.com/over-1400-crushftp-instances-vulnerable-to-exploited-zero-day/
-
MITRE Hacked By State Sponsored Group Via Ivanti Zero Days
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35800/MITRE-Hacked-By-State-Sponsored-Group-Via-Ivanti-Zero-Days.html
-
5000+ CrushFTP Servers Hacked Using Zero-Day Exploit
Hackers often target CrushFTP servers as they contain sensitive data and are used for file sharing and storage. This makes them attractive targets for… First seen on gbhackers.com Jump to article: gbhackers.com/crushftp-servers-zero-day-hack/
-
Popular File Transfer Software CrushFTP Hit by Zero-Day Exploit
First seen on hackread.com Jump to article: www.hackread.com/crushftp-file-transfer-software-zero-day-exploit/
-
Hackers Exploit Old Microsoft Office 0-day to Deliver Cobalt Strike
Hackers have leveraged an old Microsoft Office vulnerability, CVE-2017-8570, to deploy the notorious Cobalt Strike Beacon, targeting systems in Ukrain… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-exploit-old-microsoft-office/
-
Local Privilege Escalation Vulnerability in Ant Media Server (CVE-2024-32656)
Overview In an effort to safeguard our customers, we perform proactive vulnerability research with the goal of identifying zero-day vulnerabilities th… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/local-privilege-escalation-vulnerability-in-ant-media-server-cve-2024-32656/
-
Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)
A state-sponsored threat actor has managed to compromise Cisco Adaptive Security Appliances (ASA) used on government networks across the globe and use… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/24/cve-2024-20353-cve-2024-20359/
-
Nation-state actors exploited two zero-days in ASA and FTD firewalls to breach government networks
Nation-state actor UAT4356 has been exploiting two zero-days in ASA and FTD firewalls since November 2023 to breach government networks. Cisco Talos w… First seen on securityaffairs.com Jump to article: securityaffairs.com/162244/apt/nation-state-actors-exploited-two-zero-days-in-asa-and-ftd-firewalls-to-breach-government-networks.html
-
ArcaneDoor hackers exploit Cisco zero-days to breach govt networks
‹Cisco warned today that a state-backed hacking group has been exploiting two zero-day vulnerabilities in Adaptive Security Appliance (ASA) and Firepo… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/arcanedoor-hackers-exploit-cisco-zero-days-to-breach-govt-networks/
-
Cyber spies, not cyber criminals, behind most zero-day exploitation
Analysis from Google has found that zero-day vulnerabilities are much more heavily exploited for espionage purposes than for financially motivated cyb… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366575672/Cyber-spies-not-cyber-criminals-behind-most-zero-day-exploitation
-
Spyware vendors behind 75% of zero-days targeting Google
Google observed 97 zero-day vulnerabilities exploited in the wild last year, which was more than a 50% increase over the 62 exploited zero-day vulnera… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366575693/Spyware-vendors-behind-75-of-zero-days-targeting-Google
-
Cisco Zero-Days Anchor ‘ArcaneDoor’ Cyber Espionage Campaign
Attacks by a previously unknown threat actor leveraged two bugs in firewall devices to install custom backdoors on several government networks globall… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/cisco-zero-days-arcanedoor-cyberespionage-campaign
-
Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms
Cisco warns that nation state-backed hackers are exploiting at least two zero-day vulnerabilities in its ASA firewall platforms to plant malware on te… First seen on securityweek.com Jump to article: www.securityweek.com/cisco-raises-alarm-for-arcanedoor-zero-days-hitting-asa-firewall-platforms/
-
Alert! Cisco Releases Critical Security Updates to Fix 2 ASA Firewall 0-Days
Cisco has released critical security updates to address multiple vulnerabilities in its Adaptive Security Appliance (ASA) devices and Firepower Threat… First seen on gbhackers.com Jump to article: gbhackers.com/cisco-releases-critical-security-updates/
-
Hackers Exploit Cisco Firewall Zero-Days to Hack Government Networks
Security researchers at Cisco Talos have uncovered a sophisticated cyber espionage campaign dubbed >>ArcaneDoor
-
Global attacker median dwell time continues to fall
While the use of zero-day exploits is on the rise, Mandiant’s M-Trends 2024 report reveals a significant improvement in global cybersecurity posture: … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/24/2023-attacker-dwell-time/
-
MITRE research and prototyping network breached via Ivanti zero-days
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/mitre-research-and-prototyping-network-breached-via-ivanti-zero-days
-
Cisco Fixes Firewall 0-Days After Likely Nation-State Hack
Networking Giant Dubs Campaign Against Government Customers ‘Arcane Door’. Probable nation-state hackers targeted Cisco firewall appliances in a campa… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisco-fixes-firewall-0-days-after-likely-nation-state-hack-a-24934
-
CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)
A vulnerability (CVE-2024-4040) in enterprise file transfer solution CrushFTP is being exploited by attackers in a targeted fashion, according to Crow… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/23/cve-2024-4040/
-
Ivanti zero-days leveraged to infiltrate MITRE
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/ivanti-zero-days-leveraged-to-infiltrate-mitre
-
Intrusions exploiting critical CrushFTP zero-day underway
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/intrusions-exploiting-critical-crushftp-zero-day-underway
-
Palo Alto Networks: Hacker infiltrieren Firewalls durch Zero-Day-Schwachstelle
Erste Angriffe über die Schwachstelle hat es schon Ende März gegeben. Einen Hotfix für die betroffenen Firewallsysteme stellt Palo Alto Networks erst … First seen on golem.de Jump to article: www.golem.de/news/palo-alto-networks-hacker-infiltrieren-firewalls-durch-zero-day-schwachstelle-2404-184163.html
-
Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack
Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly thre… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/hackers-deploy-python-backdoor-in-palo.html
-
MITRE breached by nation-state threat actor via Ivanti zero-days
MITRE has been breached by attackers via two zero-day vulnerabilities (CVE-2023-46805, CVE-2024-21887) in Ivanti’s Connect Secure VPN devices. The att… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/22/mitre-breached/
-
Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability
Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product. The post o Networks firewall v… First seen on securityweek.com Jump to article: www.securityweek.com/siemens-industrial-product-impacted-by-exploited-palo-alto-firewall-vulnerability/
-
CrushFTP Patches Exploited Zero-Day Vulnerability
CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files. The post patches a zero-day… First seen on securityweek.com Jump to article: www.securityweek.com/crushftp-patches-exploited-zero-day-vulnerability/
-
Critical CrushFTP zero-day exploited in attacks in the wild
Threat actors exploited a critical zero-day vulnerability in the CrushFTP enterprise in targeted attacks, Crowdstrike experts warn. CrushFTP is a file… First seen on securityaffairs.com Jump to article: securityaffairs.com/162067/hacking/crushftp-zero-day-exploited.html
-
CrushFTP warns users to patch exploited zero-day immediately
CrushFTP warned customers today in a private memo of an actively exploited zero-day vulnerability fixed in new versions released today, urging them to… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/