Tag: zero-day
-
Palo Alto Networks zero-day exploited since March to backdoor firewalls
Suspected state-sponsored hackers have been exploiting a zero-day vulnerability in Palo Alto Networks firewalls tracked as CVE-2024-3400 since March 2… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-zero-day-exploited-since-march-to-backdoor-firewalls/
-
Palo Alto Networks PAN-OS critical 0-day exploited; no patch yet
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/palo-alto-networks-pan-os-critical-0-day-exploited-no-patch-yet
-
Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies
Google has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies.The high-se… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/google-warns-android-zero-day-flaws-in.html
-
Telegram fixes Windows app zero-day used to launch Python scripts
Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Pyt… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telegram-fixes-windows-app-zero-day-used-to-launch-python-scripts/
-
Another CVE (PAN-OS Zero-Day), Another Reason to Consider Zero Trust
A Year of Critical Zero Days: Firewalls, VPNs, and more This past year has been, in many ways, the year of zero-day vulnerabilities for externally ex… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/another-cve-pan-os-zero-day-another-reason-to-consider-zero-trust/
-
Company Offering 30 Million For Android, iOS, Browser Zero-Day Exploits
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35758/Company-Offering-30-Million-For-Android-iOS-Browser-Zero-Day-Exploits.html
-
Wie Hacker mit Sicherheitslücken Millionen verdienen und wer sie dafür bezahlt
Für viele sind Sicherheitslücken in Whatsapp, Google Chrome und iMessage gefährlich. Doch Hacker:innen können mit Zero-Day-Exploits Millionen verdiene… First seen on t3n.de Jump to article: t3n.de/news/wie-hacker-mit-sicherheitsluecken-millionen-verdienen-und-wer-sie-dafuer-bezahlt-1617682/
-
Palo Alto Networks warns of PAN-OS firewall zero-day used in attacks
Today, Palo Alto Networks warns that an unpatched critical command injection vulnerability in its PAN-OS firewall is being actively exploited in attac… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-firewall-zero-day-used-in-attacks/
-
Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge
Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The post … First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-releases-fixes-for-firewall-zero-day-as-first-attribution-attempts-emerge/
-
Microsoft fixed two zero-day bugs exploited in malware attacks
Microsoft addressed two zero-day vulnerabilities (CVE-2024-29988 and CVE-2024-26234) actively exploited by threat actors to deliver malware Microsoft … First seen on securityaffairs.com Jump to article: securityaffairs.com/161692/security/two-zero-day-malware-attacks.html
-
Telegram fixes Windows app zero-day caused by file extension typo
Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Pyt… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telegram-fixes-windows-app-zero-day-caused-by-file-extension-typo/
-
Price of zero-day exploits rises as companies harden products against hackers
Tools that allow government hackers to break into iPhones and Android phones, popular software like the Chrome and Safari browsers, and chat apps like… First seen on techcrunch.com Jump to article: techcrunch.com/2024/04/06/price-of-zero-day-exploits-rises-as-companies-harden-products-against-hackers/
-
Microsoft Patches 150 Flaws Including Two Zero-Days
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-patches-150-flaws-two-1/
-
Google Studie: In 2023 mehr ausgenutzte Zero-Day-Lücken Day-Angriffe steigen um knapp 50 Prozent
First seen on security-insider.de Jump to article: www.security-insider.de/google-studie-anstieg-von-zero-day-luecken-angriffen-2023-a-32585ffc411d9d1c22f917e4b7730fbb/
-
Microsoft fixes two Windows zero-days exploited in malware attacks
Microsoft has fixed two actively exploited zero-day vulnerabilities during the April 2024 Patch Tuesday, although the company failed to initially tag … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-two-windows-zero-days-exploited-in-malware-attacks/
-
Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)
On this April 2024 Patch Tuesday, Microsoft has fixed a record 147 CVE-numbered vulnerabilities, including CVE-2024-29988, a vulnerability that Micros… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/09/april-2024-patch-tuesday-cve-2024-29988/
-
Microsoft Patch Tuesday: 149 Security Vulnerabilities Zero-days
On April Patch Tuesday, Microsoft fixed 149 bugs”one of the biggest security update releases in the company’s history. Many of its software products, … First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-patch-tuesday-3/
-
Microsoft Patches Two Zero-Days Exploited for Malware Delivery
Microsoft patches CVE-2024-29988 and CVE-2024-26234, two zero-day vulnerabilities exploited by threat actors to deliver malware. The post t patches CV… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-patches-two-zero-days-exploited-for-malware-delivery/
-
Crowdfense is offering a larger 30M USD exploit acquisition program
Zero-day broker firm Crowdfense announced a 30 million USD offer as part of its Exploit Acquisition Program. Crowdfense is a world-leading research hu… First seen on securityaffairs.com Jump to article: securityaffairs.com/161584/hacking/crowdfense-30m-exploit-acquisition-program.html
-
Apple discloses 2 iOS zero-day vulnerabilities
CVE-2024-23225 and CVE-2024-23296, which bypass kernel memory protections, mark the second and third zero-day vulnerabilities that Apple has disclosed… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366572451/Apple-discloses-2-iOS-zero-day-vulnerabilities
-
Apple patches zero-days amid ‘foundational’ post-quantum update
Apple’s iOS 17.4 update not only fixes zero-day flaws that are being actively exploited, but includes important new security protocols to safeguard us… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366572533/Apple-patches-zero-days-amid-foundational-post-quantum-update
-
Zero-Day Attacks on the Rise: Google Reports 50% Increase in 2023
There’s bad news and not-so-bad news in the world of cybersecurity. In a recent report, Google revealed a significant rise in zero-day attacks, those … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/zero-day-attacks-on-the-rise-google-reports-50-increase-in-2023/
-
Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits
Crowdfense has announced a $30 million exploit acquisition program covering Android, iOS, Chrome, and Safari zero-days. The post se has announced a $3… First seen on securityweek.com Jump to article: www.securityweek.com/company-offering-30-million-for-android-ios-browser-zero-day-exploits/
-
Google addressed another Chrome zero-day exploited at Pwn2Own in March
Google fixed another Chrome zero-day vulnerability exploited during the Pwn2Own hacking competition in March. Google has addressed another zero-day vu… First seen on securityaffairs.com Jump to article: securityaffairs.com/161445/uncategorized/google-chrome-zero-day-pwn2own.html
-
Active exploitation of Google Pixel zero-days underway
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/active-exploitation-of-google-pixel-zero-days-underway
-
Ivanti CEO Vows Cybersecurity Makeover After Zero-Day Blitz
Ivanti releases a carefully scripted YouTube video and an open letter from chief executive Jeff Abbott vowing to fix the entire security organization…. First seen on securityweek.com Jump to article: www.securityweek.com/ivanti-ceo-vows-cybersecurity-makeover-after-zero-day-blitz/
-
Google Fixes Two Pixel Zero-Days Exploited by Forensic Firms
Bugs Allowed Device Unlocking and Memory Access. Google addressed two zero-day vulnerabilities in Pixel mobile phones that forensic firms exploited to… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/google-fixes-two-pixel-zero-days-exploited-by-forensic-firms-a-24785
-
1,1 Millionen USD gewonnen: Pwn2Own-Hacker attackieren Tesla, Firefox und andere
Teilnehmer der Pwn2Own Vancouver 2024 haben durch 29 Zero-Day-Schwachstellen mehr als 1,1 Millionen US-Dollar gewonnen. Ein Team erhielt sogar einen T… First seen on golem.de Jump to article: www.golem.de/news/1-1-millionen-usd-gewonnen-pwn2own-hacker-attackieren-tesla-firefox-und-andere-2403-183515.html
-
Google fixes one more Chrome zero-day exploited at Pwn2Own
Google has fixed another zero-day vulnerability in the Chrome browser, which was exploited by security researchers during the Pwn2Own hacking contest … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-fixes-one-more-chrome-zero-day-exploited-at-pwn2own/
-
Google fixes two Pixel zero-day flaws exploited by forensics firms
Google has fixed two Google Pixel zero-days exploited by forensic firms to unlock phones without a PIN and gain access to the data stored within them…. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-fixes-two-pixel-zero-day-flaws-exploited-by-forensics-firms/