Tag: zero-day
-
MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days
MITRE RD network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability. The post #038;D network ha… First seen on securityweek.com Jump to article: www.securityweek.com/mitre-hacked-by-state-sponsored-group-via-ivanti-zero-days/
-
Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack
Palo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild.Tra… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/zero-day-alert-critical-palo-alto.html
-
CrushFTP Servers Zero-day Under Active Attack: Update Now
CrushFTP is a file transfer server that supports secure protocols, offers easier configuration, and offers powerful monitoring tools. It also provides… First seen on gbhackers.com Jump to article: gbhackers.com/crushftp-zero-day-update/
-
Alert! Zero-day Exploit For WhatsApp Advertised On Hacker Forums
A zero-day exploit targeting the popular messaging app WhatsApp has been advertised on underground hacker forums. The exploit has raised serious conce… First seen on gbhackers.com Jump to article: gbhackers.com/zero-day-exploit-whatsapp-hacker-forums/
-
MITRE revealed that nation-state actors breached its systems via Ivanti zero-days
The MITRE Corporation revealed that a nation-state actor compromised its systems in January 2024 by exploiting Ivanti VPN zero-days. In April 2024, MI… First seen on securityaffairs.com Jump to article: securityaffairs.com/162045/security/mitre-security-breach-ivanti-zero-days.html
-
Palo Alto Network Issues Hotfixes for Zero-Day Bug in Its Firewall OS
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/palo-alto-network-issues-hot-fixes-for-zero-day-bug-in-its-firewall-os
-
Mitre Says Hackers Breached Unclassified R&D Network
Threat Actor Exploited Ivanti Zero-Day Vulnerabilities in Cyberattack. A nation-state threat actor gained access into an unclassified research and dev… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/mitre-says-hackers-breached-unclassified-rd-network-a-24907
-
Alert! Windows LPE Zero-day Exploit Advertised on Hacker Forums
A new zero-day Local Privilege Escalation (LPE) exploit has been put up for sale on a notorious hacker forum. This exploit, which has not yet been ass… First seen on gbhackers.com Jump to article: gbhackers.com/windows-lpe-zero-day/
-
Palo Alto ZeroDay Exploited in The Wild Following PoC Release
Palo Alto Networks has disclosed a critical vulnerability within its PAN-OS operating system, identified as CVE-2024-3400. This zero-day flaw, found i… First seen on gbhackers.com Jump to article: gbhackers.com/palo-alto-zeroday-exploited-in-wild/
-
Miscreants are exploiting enterprise tech zero days more and more, Google warns
First seen on theregister.com Jump to article: www.theregister.com/2024/03/27/surge_in_enterprise_zero_days/
-
Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included
Microsoft has released security updates for the month of April 2024 to remediate a record 149 flaws, two of which have come under active exploitation … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/microsoft-fixes-149-flaws-in-huge-april.html
-
Palo Alto Patches 0-Day (CVE-2024-3400) Exploited by Python Backdoor
First seen on hackread.com Jump to article: www.hackread.com/palo-alto-patche-0-day-cve-2024-3400-python-backdoor/
-
Apple Fixes Actively Exploited Zero-Days in iOS (CVE-2024-23225)
Apple has taken measures to address two zero-day vulnerabilities detected in iOS, which were actively exploited in the wild. The tech giant promptly i… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-23225-ios/
-
Mozilla fixes $100,000 Firefox zero-days following two-day hackathon
First seen on theregister.com Jump to article: www.theregister.com/2024/03/25/mozilla_fixes_firefox_zerodays/
-
Trust Wallet Urges Caution for Apple Users Amid Reports of Apple iMessage Zero-Day Exploit
Trust Wallet, a leading provider of crypto wallets, has issued an advisory to Apple users regarding potential iMessage vulnerability. The warning stem… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/ios-imessage-vulnerability/
-
APT Just Means Another Path Traversal
New Zero Day in Palo Alto GlobalProtect VPN Appliances Introduction On April 12th, Volexity announced they discovered zero day exploitation occurring … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/apt-just-means-another-path-traversal/
-
Microsoft Patches 2 Zero Days Exploited For Malware Delivery
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35765/Microsoft-Patches-2-Zero-Days-Exploited-For-Malware-Delivery.html
-
Threat actors exploited Palo Alto Pan-OS issue to deploy a Python Backdoor
Threat actors have been exploiting the recently disclosed zero-day in Palo Alto Networks PAN-OS since March 26, 2024. Palo Alto Networks and Unit 42 a… First seen on securityaffairs.com Jump to article: securityaffairs.com/161844/apt/palo-alto-pan-os-python-backdoor.html
-
Microsoft Patch Tuesday Tsunami: No Zero-Days, but an Asterisk
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-patch-tuesday-no-zero-days-but-one-under-active-exploit
-
Week in review: Palo Alto Networks firewalls under attack, Microsoft patches two exploited zero-days
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Palo Alto Networks firewalls under attack, hotfixes … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/14/week-in-review-palo-alto-networks-firewalls-under-attack-microsoft-patches-two-exploited-zero-days/
-
Likely State Hackers Exploiting Palo Alto Firewall Zero-Day
Company Released a Hotfix to the Command Injection Vulnerability. Firewall appliance manufacturer Palo Alto Networks rushed out a hotfix Friday to a c… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/likely-state-hackers-exploiting-palo-alto-firewall-zero-day-a-24866
-
Palo Alto Networks fixes zero-day exploited to backdoor firewalls
Palo Alto Networks has started releasing hotfixes for a zero-day vulnerability that has been actively exploited since March 26th to backdoor PAN-OS fi… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-fixes-zero-day-exploited-to-backdoor-firewalls/
-
Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws
Multiple China-nexus threat actors have been linked to the zero-day exploitation of three security flaws impacting Ivanti appliances (CVE-2023-46805, … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/researchers-identify-multiple-china.html
-
Palo Alto Networks Warns About Critical Zero-Day in PAN-OS
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/palo-alto-critical-zero-day/
-
Alert! Palo Alto RCE Zero-day Vulnerability Actively Exploited in the Wild
In a recent security bulletin, Palo Alto Networks disclosed a critical vulnerability in its GlobalProtect Gateway, identified as CVE-2024-3400. This f… First seen on gbhackers.com Jump to article: gbhackers.com/alert-palo-alto-rce-zero-day-vulnerability-actively-exploited-in-the-wild/
-
Palo Alto Networks Releases Fixes for Firewall Zero-Day as Attribution Attempts Emerge
Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The post … First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-releases-fixes-for-firewall-zero-day-as-first-attribution-attempts-emerge/
-
State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls
A state-sponsored threat actor has been exploiting a zero-day in Palo Alto Networks firewalls for the past two weeks. The post sponsored threat actor … First seen on securityweek.com Jump to article: www.securityweek.com/state-sponsored-hackers-exploit-zero-day-to-backdoor-palo-alto-networks-firewalls/