Tag: zero-day
-
SonicWall: Attackers did not exploit zero-day vulnerability to compromise Gen 7 firewalls
Akira ransomware affiliates are not leveraging an unknown, zero-day vulnerability in SonicWall Gen 7 firewalls to breach corporate networks, the security vendor shared today. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/07/sonicwall-gen-7-firewalls-exploit-vulnerability/
-
SonicWall Confirms Patched Vulnerability Behind Recent VPN Attacks, Not a Zero-Day
SonicWall has revealed that the recent spike in activity targeting its Gen 7 and newer firewalls with SSL VPN enabled is related to an older, now-patched bug and password reuse.”We now have high confidence that the recent SSL VPN activity is not connected to a zero-day vulnerability,” the company said. “Instead, there is a significant…
-
Critical Zero-Day Bugs Crack Open CyberArk, HashiCorp Password Vaults
Secrets managers hold all the keys to an enterprise’s kingdom. Two popular ones had longstanding, critical, unauthenticated RCE vulnerabilities. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/critical-zero-day-bugs-cyberark-hashicorp-password-vaults
-
CVE-2025-54987, CVE-2025-54948: Trend Micro Apex One Command Injection Zero-Days Exploited In The Wild
Tags: access, advisory, attack, cve, cybersecurity, data-breach, endpoint, exploit, flaw, infrastructure, injection, mitigation, network, rce, remote-code-execution, service, threat, tool, update, vulnerability, zero-dayTrend Micro releases a temporary mitigation tool to reduce exposure to two unpatched zero-day command injection vulnerabilities which have been exploited. Background On August 5, Trend Micro released a security advisory for two critical flaws affecting on-prem versions of Apex One Management Console. According to the advisory, Trend Micro has observed active exploitation of the…
-
Attackers Exploit Critical Trend Micro Apex One Zero-Day Flaw
Two critical vulnerabilities affect the security vendor’s management console, one of which is under active exploitation. The company has updated cloud-based products but won’t have a patch for its on-premises version until mid-August. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/attackers-exploit-trend-micro-apex-one-zero-day-flaw
-
Mögliche Zero-Day-Lücke: Sonicwall warnt vor massenhaften Angriffen auf Firewalls
Sonicwall-Firewalls mit aktueller Firmware werden von Hackern infiltriert. Forscher vermuten die Ausnutzung einer noch unbekannten Sicherheitslücke. First seen on golem.de Jump to article: www.golem.de/news/moegliche-zero-day-luecke-sonicwall-warnt-vor-massenhaften-angriffen-auf-firewalls-2508-198829.html
-
Neue Insights zum SharePoint-Gate: Mitarbeiter aus China für die Wartung
Seit dem SharePoint-Desaster im Juli 2025, bei dem Schwachstellen angegriffen wurden, gibt es fast jeden Tag neue Enthüllungen. Es wurde spekuliert, dass mutmaßlich chinesische Hacker vorab auf interne Beschreibungen von 0-Day-Schwachstellen in Microsoft SharePoint Server zugreifen konnten. Nun heißt es, … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/05/neue-insights-zum-sharepoint-gate-mitarbeiter-aus-china-fuer-die-wartung/
-
SonicWall investigates possible zero-day amid Akira ransomware surge
SonicWall probes possible new zero-day after spike in Akira ransomware attacks on Gen 7 firewalls with SSLVPN enabled. SonicWall is investigating a potential new zero-day after a surge in Akira ransomware attacks targeting Gen 7 firewalls with SSLVPN enabled. The company is working to determine if the incidents stem from an existing flaw or a…
-
Microsoft increases Zero Day Quest prize pool to $5 million
Microsoft will offer up to $5 million in bounty awards at this year’s Zero Day Quest hacking contest, which the company describes as the “largest hacking event in history.” First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-announces-5-million-prize-pool-for-zero-day-quest-hacking-contest/
-
SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Reported
SonicWall said it’s actively investigating reports to determine if there is a new zero-day vulnerability following reports of a spike in Akira ransomware actors in late July 2025.”Over the past 72 hours, there has been a notable increase in both internally and externally reported cyber incidents involving Gen 7 SonicWall firewalls where SSLVPN is enabled,”…
-
SonicWall investigates ‘cyber incidents,’ including ransomware targeting suspected 0-day
Bypassing MFA and deploying ransomware”¦sounds like something that rhymes with ‘schmero-day’ First seen on theregister.com Jump to article: www.theregister.com/2025/08/04/sonicwall_investigates_cyber_incidents/
-
SonicWall urges customers to take VPN devices offline after ransomware campaign
Multiple cybersecurity incident response firms are warning about the possibility that a zero-day vulnerability in some SonicWall devices is allowing ransomware attacks. First seen on therecord.media Jump to article: therecord.media/sonicwall-possible-zero-day-gen-7-firewalls-ssl-vpn
-
SonicWall Investigating If Zero-Day Flaw Is Behind Recent Attacks
SonicWall said Monday it’s investigating whether a zero-day vulnerability has been exploited in cyberattacks targeting Gen 7 firewalls with SSLVPN enabled. First seen on crn.com Jump to article: www.crn.com/news/security/2025/sonicwall-investigating-if-zero-day-flaw-is-behind-recent-attacks
-
SonicWall VPN Attacks: Five Key Things To Know
Security researchers are reporting active exploitation of a “likely” zero-day vulnerability affecting SonicWall VPN devices. First seen on crn.com Jump to article: www.crn.com/news/security/2025/sonicwall-vpn-attacks-5-key-things-to-know
-
Akira Ramps Up Assault on SonicWall Firewalls, Suggesting Zero-Day
An uptick of ransomware activity by the group in late July that uses the vendor’s SSL VPN devices for initial intrusion shows evidence of an as-yet-undisclosed flaw under exploitation. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/akira-sonicwall-firewalls-zero-day
-
New SharePoint Zero-Day Allows Unauthenticated Remote Code Execution
Since mid-July, this vulnerability has been actively exploited in the wild by multiple threat actors, including groups believed to be affiliated with nation-state interests. To date, more than 85 SharePoint servers worldwide have reportedly been compromised, emphasizing the urgent need for organizations to implement available mitigations and apply emergency security patches without delay. Technical Details”¦…
-
#BHUSA: Microsoft and Google Among Most Affected as Zero Day Exploits Jump 46%
Forescout also observed a big rise in CVEs added to CISA’s KEV catalog, some of which impacted end-of-life products First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-google-zero-day-exploits/
-
Leaked, Patched, and Still Hacked: The SharePoint Zero-Day Crisis
This week we explore the recent Microsoft SharePoint vulnerability that has led to widespread exploitation by ransomware gangs and Chinese State-sponsored hackers. We also cover the confirmed compromise of multiple US agencies, including the Department of Homeland Security, in a large-scale cyber espionage campaign. Kevin Johnson joins to discuss the implications of these events, the……
-
Leaked, Patched, and Still Hacked: The SharePoint Zero-Day Crisis
This week we explore the recent Microsoft SharePoint vulnerability that has led to widespread exploitation by ransomware gangs and Chinese State-sponsored hackers. We also cover the confirmed compromise of multiple US agencies, including the Department of Homeland Security, in a large-scale cyber espionage campaign. Kevin Johnson joins to discuss the implications of these events, the……
-
Aktivitäten mit Fokus auf Sonicwall-SSL-VPNs der Ransomware Akira nehmen zu
Ende Juli 2025 hat Arctic Wolf eine Zunahme von Ransomware-Aktivitäten festgestellt, bei denen Sonicwall-Firewall-Geräte als Einstiegsstellen genutzt wurden. In den analysierten Fällen wurden innerhalb kurzer Zeit mehrere sogenannte ‘Pre-Ransomware”-Intrusionen mit Zugang über Sonicwall-SSL-VPNs durchgeführt. Obwohl Angriffe auf Basis kompromittierter Zugangsdaten nicht in allen Fällen ausgeschlossen werden können, deuten die vorliegenden Hinweise auf eine Zero-Day-Schwachstelle in…
-
SonicWall firewalls targeted in ransomware attacks, possibly via zero-day
Attackers wielding the Akira ransomware and possibly a zero-day exploit have been spotted targeting SonicWall firewalls since July 15, 2025. >>In the intrusions reviewed, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/04/sonicwall-firewalls-ssl-vpn-ransomware-akira/
-
Aktivitäten mit Fokus auf Sonicwall-SSL-VPNs der Ransomware Akira nehmen zu
Ende Juli 2025 hat Arctic Wolf eine Zunahme von Ransomware-Aktivitäten festgestellt, bei denen Sonicwall-Firewall-Geräte als Einstiegsstellen genutzt wurden. In den analysierten Fällen wurden innerhalb kurzer Zeit mehrere sogenannte ‘Pre-Ransomware”-Intrusionen mit Zugang über Sonicwall-SSL-VPNs durchgeführt. Obwohl Angriffe auf Basis kompromittierter Zugangsdaten nicht in allen Fällen ausgeschlossen werden können, deuten die vorliegenden Hinweise auf eine Zero-Day-Schwachstelle in…
-
Researchers Use 0-Day to Exploit Google kernelCTF and Debian 12
Security researchers have uncovered and weaponized a critical Use-After-Free vulnerability (CVE-2025-38001) in the Linux network packet scheduler’s HFSC queuing discipline, successfully compromising Google kernelCTF instances”, LTS, COS, and mitigation”, and fully updated Debian 12. By ingeniously combining HFSC’s real-time scheduling mode, NETEM’s packet duplication feature, and a throttled Token Bucket Filter (TBF) root queue, the…
-
âš¡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More
Malware isn’t just trying to hide anymore”, it’s trying to belong. We’re seeing code that talks like us, logs like us, even documents itself like a helpful teammate. Some threats now look more like developer tools than exploits. Others borrow trust from open-source platforms, or quietly build themselves out of AI-written snippets. It’s not just…
-
Akira Ransomware targets SonicWall VPNs in likely zero-day attacks
Akira ransomware targets fully patched SonicWall VPNs in suspected zero-day attacks, with multiple intrusions seen in late July 2025. Arctic Wolf Labs researchers reported that Akira ransomware is exploiting SonicWall SSL VPNs in a likely zero-day attack, targeting even fully patched devices. Arctic Wolf Labs observed multiple intrusions via VPN access in late July 2025.…
-
Apple Patches Zero-Day Exploit Targeting Google Chrome Users
A zero-day exploit targeted Google Chrome users has been patched by Apple. Their latest updates target a variety of devices and operating systems. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-apple-zero-day-chrome-exploit-patch/
-
Akira Ransomware Exploits 0-Day Vulnerability in SonicWall Firewall Devices
Tags: access, attack, cyber, cybersecurity, exploit, firewall, ransomware, vpn, vulnerability, zero-dayCybersecurity firm Arctic Wolf has identified a significant increase in ransomware attacks targeting SonicWall firewall devices in late July 2025, with evidence pointing to the exploitation of a previously unknown zero-day vulnerability. The company’s investigation revealed multiple coordinated attacks using SonicWall SSL VPNs as the initial access point, raising serious concerns about the security of…
-
Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on Fully-Patched Devices
SonicWall SSL VPN devices have become the target of Akira ransomware attacks as part of a newfound surge in activity observed in late July 2025.”In the intrusions reviewed, multiple pre-ransomware intrusions were observed within a short period of time, each involving VPN access through SonicWall SSL VPNs,” Arctic Wolf Labs researcher Julian Tuin said in…
-
Ransomware spike linked to potential zero-day flaw in SonicWall devices
Researchers say hackers using;the Akira ransomware strain may be exploiting the vulnerability en masse. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ransomware-zero-day-flaw-sonicwall-devices/756641/