Tag: zero-day
-
Microsoft Zero Day Used by Lazarus in Rootkit Attack
North Korean state actors Lazarus Group used a Windows AppLocker zero day, along with a new and improved rootkit, in a recent cyberattack, researchers… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-zero-day-used-by-lazarus-in-rootkit-attack
-
Windows Zero Day Exploited By North Korean Hackers In Rootkit Attack
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35596/Windows-Zero-Day-Exploited-By-North-Korean-Hackers-In-Rootkit-Attack.html
-
Lazarus Hackers Exploited Windows 0-Day to Gain Kernel read/write Access
The Lazarus Group, a well-known cybercriminal organization, has recently exploited a zero-day vulnerability in Windows to gain kernel privileges, a cr… First seen on gbhackers.com Jump to article: gbhackers.com/lazarus-hackers-exploited-windows-0-day/
-
Lazarus hackers exploited Windows zero-day to gain Kernel privileges
North Korean threat actors known as the Lazarus Group exploited a flaw in the Windows AppLocker driver (appid.sys) as a zero-day to gain kernel-level … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-gain-kernel-privileges/
-
Ads for Zero-Day Exploit Sales Surge 70% Annually
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ads-zeroday-exploit-sales-surge-70/
-
Outlook Users Beware 0-Day Exploit Released On Hacking Forums
Outlook has identified a security flaw that affects how it handles certain hyperlinks. Malware actors actively exploit the vulnerability in real-worl… First seen on gbhackers.com Jump to article: gbhackers.com/outlook-exploit-warning-0-day/
-
Recent Zero Day Could Impact Up To 97k Microsoft Exchange Servers
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35558/Recent-Zero-Day-Could-Impact-Up-To-97k-Microsoft-Exchange-Servers.html
-
Week in review: AnyDesk phishing campaign targets employees, Microsoft fixes exploited zero-days
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Integrating cybersecurity into vehicle design and ma… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/18/week-in-review-anydesk-phishing-campaign-targets-employees-microsoft-fixes-exploited-zero-days/
-
New Outlook 0-day RCE Flaw Exploited in the Wild
Outlook has been discovered to have an interesting vulnerability while handling specific hyperlinks, which was found to be exploited by threat actors … First seen on gbhackers.com Jump to article: gbhackers.com/outlook-0-day-rce-flaw/
-
Microsoft Exchange Server Flaw Exploited as a Zero-Day Bug
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/microsoft-exchange-server-flaw-exploited-zero-day-bug
-
Microsoft Patch Tuesday 2024: 73 Security Flaws, Including Two 0-Days Patched
As part of its February 2024 Patch Tuesday updates, Microsoft has published patches to address 73 security flaws, including two zero-day vulnerabiliti… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-patch-tuesday-2024/
-
New critical Exchange bug exploited as zero-day
Microsoft warned today in an updated security advisory that a critical vulnerability in Exchange Server was exploited as a zero-day before being fixed… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-new-critical-exchange-bug-exploited-as-zero-day/
-
New critical Outlook RCE bug exploited as zero-day
Microsoft updated a security advisory today to warn that a critical Outlook bug was exploited in attacks as a zero-day before being fixed during this … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-new-critical-outlook-rce-bug-exploited-as-zero-day/
-
Water Hydra’s Zero-Day Attack Chain Targets Financial Traders
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/water-hydras-zero-day-financial/
-
Zero Day-Sicherheitslücke in Microsoft Windows SmartScreen
Die Lücke umgeht mit dem SmartScreen ein Sicherheitsfeature aller neueren Windows-Installationen, welches von Microsoft erstmalig mit Windows 8 eingef… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zero-day-sicherheitsluecke-in-microsoft-windows-smartscreen/a36483/
-
Microsoft Fixes Two Zero-Days in February Patch Tuesday
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-two-zerodays-february/
-
Attackers Exploit Microsoft Security-Bypass Zero-Day Bugs
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/attackers-exploit-microsoft-security-bypass-zero-day-bugs
-
Microsoft’s February 2024 Patch Tuesday Fixes 2 Zero-Days
Microsoft’s February 2024 Patch Tuesday is already a fact, bringing forth a number of security updates. This month’s release addresses a total of 73 f… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/microsoft-february-2024-patch-tuesday/
-
February Patch Tuesday corrects two Windows zero-days
Administrators should focus on quickly deploying a critical vulnerability in Microsoft Outlook and exercising caution when applying an Exchange Server… First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366569992/February-Patch-Tuesday-corrects-two-Windows-zero-days
-
Microsoft patches two zero-days for Valentine’s Day
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366569879/Microsoft-patches-two-zero-days-for-Valentines-Day
-
Hackers used new Windows Defender zero-day to drop DarkMe malware
Microsoft has patched today a Windows Defender SmartScreen zero-day exploited in the wild by a financially motivated threat group to deploy the DarkMe… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-used-new-windows-defender-zero-day-to-drop-darkme-malware/
-
Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-february-2024-patch-tuesday-fixes-2-zero-days-73-flaws/
-
Microsoft patches two zero-days exploited by attackers (CVE-2024-21412, CVE-2024-21351)
On February 2024 Patch Tuesday, Microsoft has delivered fixes for 72 CVE-numbered vulnerabilities, including two zero-days (CVE-2024-21412, CVE-2024-2… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/13/cve-2024-21412-cve-2024-21351/
-
Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 74 flaws
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-february-2024-patch-tuesday-fixes-2-zero-days-74-flaws/
-
CISA warns Fortinet zero-day vulnerability under attack
CISA alerted federal agencies that a critical zero-day vulnerability in FortiOS is being actively exploited, though Fortinet has yet to confirm report… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366569675/CISA-warns-Fortinet-zero-day-vulnerability-under-attack
-
Warning: Hackers Exploit 3 Well-known Flaws in Microsoft Word Excel
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
New Ivanti Secure VPN Zero-Day Vulnerabilities and Patches
Read details about the new Ivanti VPN zero-day vulnerabilities, along with the latest information about patches. Most of the exposed VPN appliances ar… First seen on techrepublic.com Jump to article: www.techrepublic.com/article/volexity-ivanti-connect-secure-vpn-vulnerabilities/
-
3 Well-known Microsoft Word Excel Flaws Abused by hackers Widely
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
Ivanti confirms 2 zero-day vulnerabilities are under attack
Volexity reported the vulnerabilities to Ivanti after discovering that suspected Chinese nation-state threat actors created an exploit chain to achiev… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366565999/Ivanti-confirms-2-zero-day-vulnerabilities-are-under-attack
-
Ivanti zero-day flaws under ‘widespread’ exploitation
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366566482/Ivanti-zero-day-flaws-under-widespread-exploitation