Tag: zero-day
-
Bericht von Google Day-Schwachstellen in Windows nehmen zu
First seen on security-insider.de Jump to article: www.security-insider.de/cyberkriminalitaet-zero-day-sicherheitsluecken-betriebssysteme-a-b9c06d4f74bc56172debe3883aaefdf2/
-
SonicWall fixed SMA 100 flaws that could be chained to execute arbitrary code
SonicWall addressed three SMA 100 flaws, including a potential zero-day, that could allow remote code execution if chained. SonicWall patches three SMA 100 vulnerabilities (CVE-2025-32819, CVE-2025-32820, and CVE-2025-32821), including a potential zero-day, that could be chained by a remote attacker to execute arbitrary code. The first flaw, tracked as CVE-2025-32819 (CVSS score of 8.8), is…
-
Researchers Uncover Remote Code Execution Flaw in macOS CVE-2024-44236
Security researchers Nikolai Skliarenko and Yazhi Wang of Trend Micro’s Research Team have disclosed critical details about CVE-2024-44236, a memory corruption vulnerability in Apple’s macOS Scriptable Image Processing System (sips). Discovered by Hossein Lotfi through Trend Micro’s Zero Day Initiative, this flaw allows arbitrary code execution via maliciously crafted ICC profile files. Patched in October…
-
Play Ransomware Deployed in the Wild Exploiting Windows 0-Day Vulnerability
Patched Windows zero-day vulnerability (CVE-2025-29824) in the Common Log File System (CLFS) driver was exploited in attacks linked to the Play ransomware operation prior to its disclosure on April 8, 2025. The flaw, which enabled privilege escalation via a use-after-free condition in the clfs.sys kernel driver, was weaponized by Balloonfly, the cybercrime group behind Play…
-
Windows CLFS zero-day leveraged in Play ransomware attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/windows-clfs-zero-day-leveraged-in-play-ransomware-attacks
-
Cryptohack Roundup: Trump’s Crypto Wealth
Also: Mango Markets Hacker Sentenced in CSAM Case. This week, Trump’s crypto wealth, Mango Markets hacker sentenced for CSAM, Solana’s zero-day fix, French police rescued a crypto millionaire’s father from kidnappers, stolen bitcoin frozen, US FTC sued IML and Kraken spotted a North Korean job applicant. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-trumps-crypto-wealth-a-28351
-
Windows flaw exploited as zero-day by more groups than previously thought
Attackers managed to deploy infostealer: In this attack, the Balloonfly group didn’t get to the stage of deploying the Play ransomware, as that is usually one of the final stages when attackers have control over significant parts of the network for maximum damage. However, the group did deploy an infostealer called Grixba that’s usually part…
-
Play Ransomware Group Used Windows Zero-Day
Previously, Microsoft reported that Storm-2460 had also used the privilege escalation bug to deploy ransomware on organizations in several countries. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/play-ransomware-group-windows-zero-day
-
Play ransomware affiliate leveraged zero-day to deploy malware
The Play ransomware gang exploited a high-severity Windows Common Log File System flaw in zero-day attacks to deploy malware. The Play ransomware gang has exploited a Windows Common Log File System flaw, tracked as CVE-2025-29824, in zero-day attacks to gain SYSTEM privileges and deploy malware on compromised systems. The vulnerability CVE-2025-29824, (CVSS score of 7.8) is a Use after…
-
Quantum supremacy: Cybersecurity’s ultimate arms race has China way in front
Tags: ai, authentication, automation, backup, banking, breach, business, china, ciso, computing, control, crypto, cryptography, cybersecurity, data, encryption, finance, government, healthcare, identity, infrastructure, jobs, military, ml, nist, risk, service, skills, technology, threat, update, vulnerability, zero-dayThe DeepSeek/Qwen factor: What we learned from recent AI advances, such as DeepSeek and Qwen, that caught the world by surprise is that China’s technology is much more advanced than anyone anticipated. I’d argue that this is a leading indicator that China’s quantum computing capabilities are also in absolute stealth-mode development and ahead of the…
-
Stealth Is the Strategy: Rethinking Infrastructure Defense
Tags: access, ai, attack, breach, cisco, cloud, cybersecurity, data, defense, edr, endpoint, espionage, exploit, finance, firewall, gartner, google, group, infrastructure, injection, ivanti, malicious, monitoring, network, resilience, risk, strategy, technology, threat, tool, vpn, vulnerability, zero-day, zero-trust -
Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324
Threat actors launch second wave of attacks on SAP NetWeaver, exploiting webshells from a recent zero-day vulnerability. In April, ReliaQuest researchers warned that a zero-day vulnerability, tracked as CVE-2025-31324 (CVSS score of 10/10), in SAP NetWeaver is potentially being exploited. Thousands of internet-facing applications are potentially at risk. The flaw in SAP NetWeaver Visual Composer Metadata Uploader…
-
Softwareupdate – Apple schließt Zero-Day-Schwachstellen mit Patch für iOS 18
First seen on security-insider.de Jump to article: www.security-insider.de/apple-ios-update-zero-day-schwachstellen-carplay-probleme-a-39b0e75ade847564bacdfc2804a8d88b/
-
Third Parties and Machine Credentials: The Silent Drivers Behind 2025’s Worst Breaches
It wasn’t ransomware headlines or zero-day exploits that stood out most in this year’s Verizon 2025 Data Breach Investigations Report (DBIR), it was what fueled them. Quietly, yet consistently, two underlying factors played a role in some of the worst breaches: third-party exposure and machine credential abuse.According to the 2025 DBIR, third-party involvement in breaches…
-
SS7 0-day im Darknet
Unschöne Sache, wenn sich das bewahrheitet. Ein neuer Nutzer bietet in einem Untergrundforum angeblich eine 0-Day-Schwachstelle im SS7-Protokoll zum Verkauf an. Diese 0-day-Schwachstelle soll das Abfangen von SMS, die Verfolgung von Telefonen in Echtzeit und vieles mehr ermöglichen. Was ist SS7? … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/06/ss7-0-day-im-darknet/
-
Hackers Selling SS7 0-Day Exploit on Dark Web for $5,000
A newly discovered dark web listing claims to sell a critical SS7 protocol exploit for $5,000, raising alarms about global telecom security. The seller, operating under the alias >>GatewayPhantom,
-
Was ist Zero-Day und warum ist dies so gefährlich?
Zero-Day ist extrem gefährlich, da noch Niemand von der Sicherheitslücke weis, außer derjenige, der diese Schwachstelle entdeckt hat. Wird diese im positiven Fall direkt dem Hersteller gemeldet und von diesem ein Patch erstellt, ist die Gefahr nahezu gebannt. Fällt der Zero-Day aber in kriminelle Hände ist sind die Gefahren durch die unbekannte Schwachstelle nicht vorhersehbar,…
-
How China and North Korea Are Industrializing Zero-Days
Tags: china, cloud, corporate, cyberattack, exploit, google, group, hacker, intelligence, korea, north-korea, organized, threat, zero-dayGoogle Cloud’s Hultquist on How State Hackers Exploit Code and Corporate Hiring. John Hultquist, chief analyst at Google Threat Intelligence Group, Google Cloud, discussed how China and North Korea are transforming cyberattacks into organized, factory-like operations. Alongside zero-day exploits, North Korean IT operatives are quietly infiltrating Fortune 500 companies under false identities. First seen on…
-
IoC Scanner for SAP Zero-Day (CVE-2025-31324) available
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/ioc-scanner-sap-zero-day-available
-
Indicators of Compromise Scanner für SAP Zero-Day (CVE-2025-31324)
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/ioc-scanner-sap-zero-day-cve-2025-31324
-
2024 wurden 75 0-day-Schwachstellen (meist von Staatshackern) ausgenutzt
Google Thread Intelligence hat eine Auswertung von 0-day-Schwachstellen, für die es bei Ausnutzung noch keinen Patch gab, für das Jahr 2024 vorgelegt. In diesem Jahr gab es 75 0-Day-Schwachstellen, die in freier Wildbahn ausgenutzt wurden. Das ist zwar ein Rückgang … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/02/2024-wurden-75-0-day-schwachstellen-meist-von-staatshackern-ausgenutzt/
-
Breach Roundup: Surge in Edge Device Zero-Day Exploits
Also, Baltimore Public Schools Suffer Data Breach, Disney Menu Hacker Sentenced. This week, zero-day exploits surged, accused Nefilim hacker extradited, Baltimore schools breach, CISA lists Broadcom Brocade, Commvault flaws, a fake WooCommerce patch, Akira hit Hitachi Vantara, ex-Disney worker sentenced and a Darcula phishing kit upgrade. FBI published 42,000 phishing domains. First seen on govinfosecurity.com…
-
The Rising Threat of Zero-Day Exploits Targeting Enterprise Security Products
Zero-day exploits continue to pose one of the most significant and evolving cybersecurity threats to businesses worldwide. According to a recent report, 75 zero-day vulnerabilities were exploited this year, with 44% of these attacks targeting enterprise security products. These vulnerabilities are particularly dangerous because they are exploited before the vendor can address or patch them,…
-
Commvault Confirms Zero-Day Attack Breached Its Azure Cloud Environment
Commvault, a global leader in data protection and information management, has confirmed that a sophisticated cyberattack involving a zero-day vulnerability breached its Azure cloud environment earlier this week. The breach, attributed to a suspected nation-state threat actor, underscores the evolving risks faced by cloud service providers and their clients. On February 20, 2025, Commvault was…
-
Abuse of zero-days dips last year, reports Google
First seen on scworld.com Jump to article: www.scworld.com/brief/abuse-of-zero-days-dips-last-year-reports-google
-
Sicherheitslücke ermöglicht Systemkontrolle – Notfallpatch für kritische Zero-Day-Schwachstelle in SAP NetWeaver
First seen on security-insider.de Jump to article: www.security-insider.de/kritische-sicherheitsluecke-sap-netweaver-notfall-patch-a-0ea1dd66a85bfdbb1f30565bc8b6ef22/
-
75 zero-days seen in 2024 as nations, spyware vendors continue exploitation
Google’s Threat Intelligence team published its annual zero-day report on Tuesday, finding that 75 vulnerabilities were exploited in the wild in 2024, down from 98 in the prior year. First seen on therecord.media Jump to article: therecord.media/google-zero-day-report-2024