Collecting Cyber-News from over 60 sources

Tag: zero-day

Microsoft fixes actively exploited Windows Hyper-V zero-day flaws

Jan 14, 2025 11:02 PM

Tags: cve, exploit, flaw, microsoft, update, windows, zero-day

Microsoft has marked January 2025 Patch Tuesday with a hefty load of patches: 157 CVE-numbered security issues have been fixed in various products, three of which (in Hyper-V) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/14/january-2025-patch-tuesday-microsoft-hyper-v-zero-day-cve-2025-21333-cve-2025-21334-cve-2025-21335/
Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks

Jan 14, 2025 11:02 PM

Tags: attack, data-breach, firewall, fortinet, Internet, login, unauthorized, vpn, zero-day

An ongoing campaign targeting FortiGate devices with management interfaces exposed on the public Internet is leading to unauthorized administrative logins and configuration changes, creating new accounts, and performing SSL VPN authentication. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/zero-day-security-bug-fortinet-firewall-attacks
Zero-Day Likely Cause of Campaign Against Fortinet Firewalls

Jan 14, 2025 9:04 PM

Tags: firewall, fortinet, zero-day

First seen on scworld.com Jump to article: www.scworld.com/brief/zero-day-likely-cause-of-campaign-against-fortinet-firewalls
Ivanti VPN zero-day implicated in Nominet hack

Jan 14, 2025 9:04 PM

Tags: ivanti, vpn, zero-day

First seen on scworld.com Jump to article: www.scworld.com/brief/ivanti-vpn-zero-day-implicated-in-nominet-hack
Widespread Fortinet firewall exploitation likely due to zero-day

Jan 14, 2025 9:04 PM

Tags: exploit, firewall, fortinet, zero-day

First seen on scworld.com Jump to article: www.scworld.com/brief/widespread-fortinet-firewall-exploitation-likely-due-to-zero-day
Microsoft Patches Trio of Exploited Windows Hyper-V Zero-Days

Jan 14, 2025 9:04 PM

Tags: exploit, microsoft, update, vulnerability, windows, zero-day

Patch Tuesday: Microsoft has rushed out fixes for a trio of already-exploited zero-day vulnerabilities in the Windows Hyper-V platform. The post Microsoft Patches Trio of Exploited Windows Hyper-V Zero-Days appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-patches-trio-of-exploited-windows-hyper-v-zero-days/
Ivanti zero-day patching increases amid ongoing attacks

Jan 14, 2025 9:04 PM

Tags: attack, cve, ivanti, update, vulnerability, zero-day

Recent scans conducted by the Shadowserver Foundation show many organizations have patched Ivanti instances vulnerable to CVE-2025-0282 over the last week. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366617951/Ivanti-zero-day-patching-increases-amid-ongoing-attacks
Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws

Jan 14, 2025 9:04 PM

Tags: exploit, flaw, microsoft, update, vulnerability, zero-day

Today is Microsoft’s January 2025 Patch Tuesday, which includes security updates for 159 flaws, including eight zero-day vulnerabilities, with three actively exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-january-2025-patch-tuesday-fixes-8-zero-days-159-flaws/
Fortinet fixes FortiOS zero-day exploited by attackers for months (CVE-2024-55591)

Jan 14, 2025 6:43 PM

Tags: authentication, exploit, firewall, fortinet, vulnerability, zero-day

Fortinet has patched an authentication bypass vulnerability (CVE-2024-55591) affecting its FortiOS firewalls and FortiProxy web gateways that’s being exploited by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/14/fortinet-fortigate-zero-day-vulnerability-exploited-cve-2024-55591/
Hackers Attacking Internet Connected Fortinet Firewalls Using Zero-Day Vulnerability

Jan 14, 2025 11:46 AM

Tags: access, attack, cyber, data-breach, exploit, firewall, firmware, fortinet, hacker, Internet, network, unauthorized, vulnerability, zero-day

A widespread campaign targeting Fortinet FortiGate firewall devices with exposed management interfaces on the public internet. The attacks, observed by Arctic Wolf between November and December 2024, exploit what is believed to be a zero-day vulnerability, allowing unauthorized access and configuration changes to critical network security infrastructure. The campaign, which affected devices running firmware versions…
Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces

Jan 14, 2025 11:46 AM

Tags: attack, authentication, cybersecurity, data-breach, firewall, fortinet, login, threat, unauthorized, vpn, vulnerability, zero-day

Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public internet.”The campaign involved unauthorized administrative logins on management interfaces of firewalls, creation of new accounts, SSL VPN authentication through those accounts, and various other configuration changes,” cybersecurity firm First seen on thehackernews.com…
UK Registry Nominet Breached Via Ivanti Zero-Day

Jan 14, 2025 11:46 AM

Tags: ivanti, vulnerability, zero-day

The .uk registry Nominet has been breached by a recently disclosed zero-day vulnerability in Ivanti products First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-registry-nominet-breached/
Ivanti zero-day has researchers scrambling

Jan 14, 2025 8:46 AM

Tags: exploit, ivanti, threat, vulnerability, zero-day

Threat hunters are on high alert as 900 Ivanti Connect Secure instances remain unpatched and vulnerable to exploitation, according to Shadowserver. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ivanti-connect-secure-zero-day/737149/
Miscreants ‘mass exploited’ Fortinet firewalls, ‘highly probable’ zero-day used

Jan 14, 2025 8:46 AM

Tags: exploit, firewall, fortinet, ransomware, threat, zero-day

Ransomware ‘not off the table,’ Arctic Wolf threat hunter tells El Reg First seen on theregister.com Jump to article: www.theregister.com/2025/01/14/miscreants_mass_exploited_fortinet_firewalls/
What 2024 taught us about security vulnerabilties

Jan 14, 2025 8:46 AM

Tags: exploit, Hardware, software, tactics, threat, vulnerability, zero-day

From zero-day exploits to weaknesses in widely used software and hardware, the vulnerabilities uncovered last year underscore threat actors’ tactics and the critical … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/14/cybersecurity-vulnerabilities-2024/
UK domain registry Nominet breached via Ivanti zero-day

Jan 14, 2025 8:46 AM

Tags: attack, cve, Internet, ivanti, vulnerability, zero-day

The number of internet-facing Ivanti Connect Secure instances vulnerable to attack via CVE-2025-0282 has fallen from 2,048 to 800 in the last four days, the Shadowserver … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/13/uk-domain-registry-nominet-breached-via-ivanti-zero-day-cve-2025-0282/
UK domain registry Nominet confirms breach via Ivanti zero-day

Jan 14, 2025 8:46 AM

Tags: breach, country, ivanti, network, vpn, zero-day

Nominet, the official .UK domain registry and one of the largest country code registries, has confirmed that its network was breached two weeks ago using an Ivanti VPN zero-day vulnerability. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-domain-registry-nominet-confirms-breach-via-ivanti-zero-day-vulnerability/
Neue und alte Schwachstellen geschlossen Day-Schwachstellen in Ivanti Connect Secure VPN

Jan 14, 2025 8:46 AM

Tags: ivanti, update, vpn, vulnerability, zero-day

First seen on security-insider.de Jump to article: www.security-insider.de/ivanti-warnung-schwachstellen-connect-secure-policy-secure-gateways-a-9747fc7b8fdd216f06cdda657ca04150/
Nominet probes network intrusion linked to Ivanti zero-day exploit

Jan 13, 2025 12:26 PM

Tags: backdoor, exploit, ivanti, network, unauthorized, zero-day

Unauthorized activity detected, but no backdoors found First seen on theregister.com Jump to article: www.theregister.com/2025/01/13/nominet_ivanti_zero_day/
Week in review: Exploited Ivanti Connect Secure zero-day, Patch Tuesday forecast

Jan 12, 2025 10:26 AM

Tags: exploit, ivanti, update, WeeklyReview, zero-day

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Ivanti Connect Secure zero-day exploited by attackers (CVE-2025-0282) Ivanti … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/12/week-in-review-exploited-ivanti-connect-secure-zero-day-patch-tuesday-forecast/
Ivanti VPN zero-day exploited by Chinese hackers

Jan 11, 2025 11:42 AM

Tags: china, exploit, hacker, ivanti, vpn, zero-day

First seen on scworld.com Jump to article: www.scworld.com/brief/ivanti-vpn-zero-day-exploited-by-chinese-hackers
Mandiant links Ivanti zero-day exploitation to Chinese hackers

Jan 10, 2025 11:18 AM

Tags: china, cve, exploit, hacker, ivanti, mandiant, zero-day

Mandiant warned users to be prepared for widespread exploitation of CVE-2025-0282 as Ivanti products have become a popular target for attackers in recent years. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366617826/Mandiant-links-Ivanti-zero-day-exploitation-to-Chinese-hackers
Ivanti zero-day exploited by APT group that previously targeted Connect Secure appliances

Jan 10, 2025 5:18 AM

Tags: access, advisory, api, apt, attack, authentication, backdoor, china, credentials, cve, cyberespionage, data, espionage, exploit, flaw, google, group, ivanti, malicious, malware, mandiant, network, remote-code-execution, service, software, threat, tool, vpn, vulnerability, zero-day

Researchers from Google’s Mandiant division believe the critical remote code execution vulnerability patched on Wednesday by software vendor Ivanti has been exploited since mid-December by a Chinese cyberespionage group. This is the same group that has exploited zero-day vulnerabilities in Ivanti Connect Secure appliances back in January 2024 and throughout the year.The latest attacks, exploiting…
Ivanti zero-day attacks infected devices with custom malware

Jan 10, 2025 1:18 AM

Tags: attack, hacker, ivanti, malware, threat, vpn, vulnerability, zero-day

Hackers exploiting the critical Ivanti Connect Secure zero-day vulnerability disclosed yesterday installed on compromised VPN appliances new malware called ‘Dryhook’ and ‘Phasejam’ that is not currently associated with any threat group. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-chinese-hackers-likely-behind-ivanti-vpn-zero-day-attacks/
Active exploitation of Ivanti Connect Secure zero-day ongoing

Jan 9, 2025 10:21 PM

Tags: exploit, ivanti, zero-day

First seen on scworld.com Jump to article: www.scworld.com/brief/active-exploitation-of-ivanti-connect-secure-zero-day-ongoing
Hackers take Pride in exploiting Four-Faith zero day

Jan 9, 2025 10:21 PM

Tags: exploit, hacker, zero-day

First seen on scworld.com Jump to article: www.scworld.com/news/hackers-take-pride-in-exploiting-four-faith-zero-day
Breach Roundup: Finland Detains Tanker Tied to Cable Sabotage

Jan 9, 2025 10:21 PM

Tags: botnet, breach, data, data-breach, exploit, flaw, framework, russia, zero-day

Also, Alleged Gravy Analytics Breach Exposes Location Data. This week, a Russian tanker linked to cable sabotage detained in Finland, a claimed Gravy Analytics breach exposed location data, a Mirai-based botnet exploited zero-day flaws, Dell updated framework flaws and a court sentenced a Florida woman for laundering millions in romance scams. First seen on govinfosecurity.com…
New Mirai botnet targets industrial routers

Jan 9, 2025 9:18 PM

Tags: access, attack, botnet, cctv, china, credentials, cve, cybercrime, data, ddos, exploit, germany, network, password, remote-code-execution, router, russia, update, vulnerability, zero-day

According to security analysis, the Gayfemboy botnet, based on the notorious Mirai malware, is currently spreading around the world. Researchers from Chainxin X Lab found that cybercriminals have been using the botnet since November 2024 to attack previously unknown vulnerabilities. The botnet’s preferred targets include Four-Faith and Neterbit routers or smart home devices.Experts from VulnCheck reported at the end of…
Ivanti customers confront new zero-day with suspected nation-state nexus

Jan 9, 2025 7:20 PM

Tags: attack, exploit, group, ivanti, threat, zero-day

The latest attacks come one year after a threat group exploited a pair of zero-days in the same Ivanti product. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ivanti-zero-day-attacks/736932/
New zero-day exploit targets Ivanti VPN product

Jan 9, 2025 7:20 PM

Tags: china, exploit, ivanti, malware, mandiant, threat, vpn, zero-day

Mandiant says it found malware in impacted devices associated with a Chinese-linked threat group. First seen on cyberscoop.com Jump to article: cyberscoop.com/ivanti-vpn-vulnerabilities-zero-day-exploit-china-cisa/