Tag: zero-day
-
Ivanti confirms 2 zero-day vulnerabilities are under attack
Volexity reported the vulnerabilities to Ivanti after discovering that suspected Chinese nation-state threat actors created an exploit chain to achiev… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366565999/Ivanti-confirms-2-zero-day-vulnerabilities-are-under-attack
-
Ivanti discloses new zero-day flaw, releases delayed patches
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366568513/Ivanti-discloses-new-zero-day-flaw-releases-delayed-patches
-
New zero-days in Citrix NetScaler ADC, Gateway under attack
The new vulnerabilities come four months after a variety of threat actors exploited the ‘Citrix Bleed’ zero-day flaw in NetScaler ADC and Gateway prod… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366566508/New-zero-days-in-Citrix-NetScaler-ADC-Gateway-under-attack
-
Spyware vendors are driving zero-day exploitation
Google’s Threat Analysis Group urged further government action against commercial surveillance vendors that let customers abuse spyware products with … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366569061/Google-Spyware-vendors-are-driving-zero-day-exploitation
-
NCC Group records the most ransomware victims ever in 2023
Enterprises faced an alarming number of ransomware attacks as gangs targeted supply chains and took advantage of zero-day vulnerabilities and organiza… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366569338/NCC-Group-records-the-most-ransomware-victims-ever-in-2023
-
3 Well-known Microsoft Word & Excel Flaws Abused by hackers Widely
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
Chinese Hackers Exploiting VMware 0-Day Flaw Since 2021
Mandiant and VMware recently uncovered a sophisticated cyber espionage campaign. The attackers, a Chinese group identified as UNC3886, leveraged a kno… First seen on gbhackers.com Jump to article: gbhackers.com/chinese-hackers-vmware-0-day-flaw/
-
Active Scan Alert: Over 28,000 Ivanti Instances Exposed to Internet
Ivanti has disclosed two new zero-day vulnerabilities assigned with CVE-2024-21888 and CVE-2024-21893 in the products Ivanti Connect Secure and Ivanti… First seen on gbhackers.com Jump to article: gbhackers.com/ivanti-flaw-under-attack/
-
Apple and Google Just Patched Their First Zero-Day Flaws of the Year
First seen on wired.com Jump to article: www.wired.com/story/apple-google-zero-day-flaws-critical-update-january-2024/
-
February 2024 Patch Tuesday forecast: Zero days are back and a new server too
January 2024 Patch Tuesday is behind us. A relatively light release from Microsoft with 39 CVEs addressed in Windows 10, 35 in Windows 11, and surpris… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/09/february-2024-patch-tuesday-forecast/
-
Google Patches Chromes Fifth Zero-Day of the Year
First seen on threatpost.com Jump to article: threatpost.com/google-patches-chromes-fifth-zero-day-of-the-year/180432/
-
The MOVEit breach impact and fallout: How can you respond?
The MOVEit breach could be the most devastating exploitation of a zero-day vulnerability ever, and the effects continue to ripple across the globe. Th… First seen on securityintelligence.com Jump to article: securityintelligence.com/news/the-moveit-breach-impact-and-fallout-how-can-you-respond/
-
Tenable Cloud Security erkennt Zero-Day-Bedrohungen nahezu in Echtzeit
Als Marktführer im Schwachstellenmanagement mit mehr als zwei Jahrzehnten Erfahrung verfügt Tenable über die branchenweit umfangreichsten CVE-Daten (C… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/tenable-cloud-security-erkennt-zero-day-bedrohungen-nahezu-in-echtzeit/a31912/
-
Aktueller MS-Patch behebt Zero-Day-Schwachstelle DogWalk
Die DogWalk-Zero-Day-Schwachstelle, die im Microsoft Windows Support Diagnostic Tool (MSDT) gefunden wurde, ist in Security-Kreisen nicht neu. Sie wur… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/aktueller-ms-patch-behebt-zero-day-schwachstelle-dogwalk/a31917/
-
Wie man Zero-Day-Exploits durch maschinelles Lernen erkennen kann
Command- und SQL-Injection-Angriffe gehören nach wie vor zu den häufigsten und besorgniserregendsten Bedrohungen, die Webanwendungen betreffen. Herköm… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/wie-man-zero-day-exploits-durch-maschinelles-lernen-erkennen-kann/a32606/
-
Neue Zero-Day-Studie S4 zur Gefährdung von OT-Umgebungen
Im Rahmen der Untersuchung wurden mehrere Schwachstellen bei verschiedenen Anbietern gefunden, sowohl in Cloud-Management-Plattformen als auch in Edge… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/neue-zero-day-studie-s4-zur-gefaehrdung-von-ot-umgebungen/a33446/
-
Mandiant sieht Zero-Day-Sicherheitslücke in Zusammenhang mit KRITIS-Angriffen
Mandiant hat die frühe Ausnutzung der Sicherheitslücke unter dem vorläufigen Gruppen-Namen UNC4697 verfolgt und dokumentiert. Mittlerweile wurden die … First seen on infopoint-security.de Jump to article: www.infopoint-security.de/mandiant-sieht-zero-day-sicherheitsluecke-in-zusammenhang-mit-kritis-angriffen/a33795/
-
MOVEit’s Zero Day: Turbulenzen bei der Dateiübertragung
Generell sind Angreifer immer auf der Suche nach Möglichkeiten, anfällige und ungepatchte Systeme auszunutzen. Durch die Ausnutzung von Schwachstellen… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/moveits-zero-day-turbulenzen-bei-der-dateiuebertragung/a34547/
-
Microsoft schließt 130 Sicherheitslücken
Den Forschern der Threat Analysis Group (TAG) von Google wird die Offenlegung eines Zero-Days im Windows-Fehlerbericht von Microsoft (CVE-2023-36874) … First seen on infopoint-security.de Jump to article: www.infopoint-security.de/microsoft-schliesst-130-sicherheitsluecken/a34781/
-
More Ivanti VPN Zero-Days Fuel Attack Frenzy as Patches Finally Roll
First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/more-ivanti-vpn-zero-day-bugs-attack-frenzy-patches-rolling
-
Ivanti Zero-Day Patches Delayed as ‘KrustyLoader’ Attacks Mount
First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/ivanti-zero-day-patches-delayed-krustyloader-attacks-mount
-
Ivanti Releases Zero-Day Patches and Reveals Two New Bugs
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ivanti-zeroday-patches-two-new-bugs/
-
Rust Payloads Exploiting Ivanti Zero-Days Linked to Sophisticated Sliver Toolkit
After analyzing the 12 Rust payloads exploiting Ivanti ConnectSecure vulnerabilities, Synacktiv found they all enabled a sophisticated post-exploitati… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/rust-payloads-ivanti-zero-days/
-
Ivanti Researchers Report Two Critical Zero-Day Vulnerabilities
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/ivanti-researchers-report-of-two-critical-zero-day-vulnerabilities
-
Two Ivanti Zero-Days Actively Exploited in the Wild
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/two-ivanti-zerodays-actively/
-
Apache ERP Zero-Day Underscores Dangers of Incomplete Patches
Apache fixed a vulnerability in its OfBiz enterprise resource planning (ERP) framework last month, but attackers and researchers found a way around th… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/apache-erp-0day-underscores-dangers-of-incomplete-patches
-
Google Releases Eighth Zero-Day Patch of 2023 for Chrome
CVE-2023-7024, exploited in the wild prior to patching, is a Chrome vulnerability that allows remote code execution within the browser’s WebRTC compon… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/google-eighth-zero-day-patch-2023-chrome
-
Ransomware Attackers Abuse Multiple Windows CLFS Driver Zero-Days
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/ransomware-attackers-abuse-windows-clfs-driver-zero-days
-
Zero-Day, Angler Kit Exploits Help Drive Up Malvertising By 325%
First seen on http: Jump to article: packetstormsecurity.org/news/view/25730/Zero-Day-Angler-Kit-Exploits-Help-Drive-Up-Malvertising-By-325.html
-
Experts Downplay MySQL Database Zero-Days
A rash of zero-day exploits and vulnerabilities in the MySQL database were disclosed to the Full Disclosure ;mailing list over the weekend, but expert… First seen on http: Jump to article: threatpost.com/en_us/blogs/how-tips-shopping-online-112012