Tag: zero-day
-
Apple Patches Two Zero-Day Attack Vectors
Threat actors exploited two vulnerabilities in Intel-based machines. Google’s Threat Analysis Group discovered the flaws. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/apple-patches-zero-day-vulnerabilities/
-
Over 2,000 Palo Alto firewalls hacked using recently patched bugs
Hackers have already compromised thousands of Palo Alto Networks firewalls in attacks exploiting two recently patched zero-day vulnerabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-2-000-palo-alto-firewalls-hacked-using-recently-patched-bugs/
-
Palo Alto Networks warns hackers are breaking into its customers’ firewalls, again
Hackers have compromised potentially thousands of Palo Alto customers by exploiting two new zero-day vulnerabilities First seen on techcrunch.com Jump to article: techcrunch.com/2024/11/21/palo-alto-networks-warns-hackers-are-breaking-into-its-customers-firewalls-again/
-
QuantumSoftware kombiniert KI-Engines, Post-Quantum-Verschlüsselung und DevOps-Optimierung
Die neue Check-Point-Quantum-Firewall-Software R82 kombiniert KI-Engines, Post-Quantum-Verschlüsselung und DevOps-Optimierungen für skalierbare und vereinfachte Rechenzentrumsoperationen. Check Point präsentiert damit eine KI-basierte Netzwerksicherheitslösung der nächsten Generation. Bei einem globalen Anstieg der Cyber-Angriffe um 75 Prozent bietet R82 KI-gestützte Engines, die Schutz vor Zero-Day-Bedrohungen, sowie Phishing, Malware und DNS-Exploits (Domain Name System) gewährleisten. Darüber hinaus enthält sie neue…
-
2,000 Palo Alto Networks devices compromised in latest attacks
Attackers have compromised around 2,000 Palo Alto Networks firewalls by leveraging the two recently patched zero-days (CVE-2024-0012 and CVE-2024-9474), Shadowserver … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/21/palo-alto-firewalls-compromised-cve-2024-0012-cve-2024-9474/
-
Mehrere PTZ-Kameras betroffen – Zero-Day-Schwachstellen in Kameras von PTZOptics
First seen on security-insider.de Jump to article: www.security-insider.de/zero-day-sicherheitsluecken-ptz-kameras-a-acf9a411f009e37846435594fbf5cbc3/
-
Apple Urgently Patches Actively Exploited Zero-Days
Though the information regarding the exploits is limited, the company did report that Intel-based Mac systems have been targeted by cybercriminals looking to exploit CVE-2024-44308 and CVE-2024-44309. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/apple-patches-actively-exploited-zero-days
-
Check Point Unveils New AI-Powered Network Security Software Amidst Rising Global Threats
Today, Check Point Software has unveiled its new Check Point Quantum Firewall Software R82 (R82), as well as additional innovations for the Infinity Platform. The R82 delivers new AI-powered engines to prevent against zero-day threats including phishing, malware, and domain name system (DNS) exploits. It also includes new architectural changes and innovations that drive DevOps…
-
‘Water Barghest’ Sells Hijacked IoT Devices for Proxy Botnet Misuse
Tags: botnet, cyber, cybercrime, espionage, group, iot, marketplace, router, vulnerability, zero-dayAn elusive, sophisticated cybercriminal group has used known and zero-day vulnerabilities to compromise more than 20,000 SOHO routers and other IoT devices so far, and then puts them up for sale on a residential proxy marketplace for state-sponsored cyber-espionage actors and others to use. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/water-barghest-sells-hijacked-iot-devices-proxy-botnet-misuse
-
Palo Alto Networks customers grapple with another actively exploited zero-day
The security vendor warned of an unconfirmed vulnerability in PAN-OS earlier this month. A CVE;entry and patch came 10 days later. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/palo-alto-networks-pan-os-firewall-zero-day/733336/
-
Apple Confirms Zero Day Attacks Hitting macOS Systems
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36616/Apple-Confirms-Zero-Day-Attacks-Hitting-macOS-Systems.html
-
Apple addressed two actively exploited zero-day vulnerabilities
Apple released security updates for iOS, iPadOS, macOS, visionOS, and Safari browser to address two actively exploited zero-day flaws. Apple released security updates for two zero-day vulnerabilities, tracked as CVE-2024-44309 and CVE-2024-44308, in iOS, iPadOS, macOS, visionOS, and Safari web browser, which are actively exploited in the wild. The vulnerability CVE-2024-44309 is a cookie management issue…
-
Apple fixes 2 zero-days exploited to breach macOS systems (CVE-2024-44309, CVE-2024-44308)
Apple has released emergency security updates for macOS Sequoia that fix two zero-day vulnerabilities (CVE-2024-44309, CVE-2024-44308) that >>may have been actively … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/20/cve-2024-44309-cve-2024-44308/
-
Oracle Patches Exploited Agile PLM Zero-Day
Oracle has patched a high-severity information disclosure zero-day in Agile PLM that has been exploited in the wild. The post Oracle Patches Exploited Agile PLM Zero-Day appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/oracle-patches-exploited-agile-plm-zero-day/
-
Microsoft KI und Cloud: Neues Bug-Bounty-Event mit 4 Millionen US-Dollar Prämie
Entdecken Sicherheitsforscher beim neuen Zero-Day-Quest-Event Lücken in Microsoft-Produkten, winken hohe Geldprämien. First seen on heise.de Jump to article: www.heise.de/news/Microsoft-KI-und-Cloud-Neues-Bug-Bounty-Event-mit-4-Millionen-US-Dollar-Praemie-10077677.html
-
Apple Notfall-Sicherheitsupdate: Intel-basierte Mac-Systeme in Gefahr
Apple schließt kritische Sicherheitslücken in macOS mit Notfall-Sicherheitsupdates. Jetzt handeln und vor Zero-Day-Angriffen schützen! First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/apple-notfall-sicherheitsupdate-intel-basierte-mac-systeme-in-gefahr-304500.html
-
Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities
Apple has released security updates for iOS, iPadOS, macOS, visionOS, and its Safari web browser to address two zero-day flaws that have come under active exploitation in the wild.The flaws are listed below -CVE-2024-44308 – A vulnerability in JavaScriptCore that could lead to arbitrary code execution when processing malicious web contentCVE-2024-44309 – A cookie management…
-
Apple says Mac users targeted in zero-day cyberattacks
Apple said the security update for Macs, iPhones, and iPads is “recommended for all users.” First seen on techcrunch.com Jump to article: techcrunch.com/2024/11/19/apple-says-mac-users-targeted-in-zero-day-cyberattacks/
-
China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer
No word on when or if the issue will be fixed First seen on theregister.com Jump to article: www.theregister.com/2024/11/19/china_brazenbamboo_fortinet_0day/
-
Apple fixes two zero-days used in attacks on Intel-based Macs
Apple released emergency security updates to fix two zero-day vulnerabilities that were exploited in attacks on Intel-based Mac systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apple-fixes-two-zero-days-used-in-attacks-on-intel-based-macs/
-
Apple Confirms Zero-Day Attacks Hitting macOS Systems
Apple rushes out out major macOS and iOS security updates to cover a pair of vulnerabilities already being exploited in the wild. The post Apple Confirms Zero-Day Attacks Hitting macOS Systems appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/
-
Microsoft launches ‘Zero Day Quest’ competition to enhance cloud and AI security
The tech giant is upping the bounties attached to several popular systems. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-launches-zero-day-quest-competition-to-enhance-cloud-and-ai-security/
-
Fortinet VPN zero-day leveraged in new Chinese credential theft campaign
First seen on scworld.com Jump to article: www.scworld.com/brief/fortinet-vpn-zero-day-leveraged-in-new-chinese-credential-theft-campaign
-
Palo Alto sounds alarm over PAN-OS zero-day attacks
First seen on scworld.com Jump to article: www.scworld.com/news/palo-alto-sounds-alarm-over-pan-os-zero-day-attacks
-
Apple Confirms Zero-Day Attacks Hitting Intel-based Macs
Apple rushes out out major macOS and iOS security updates to cover a pair of vulnerabilities already being exploited in the wild. The post Apple Confirms Zero-Day Attacks Hitting Intel-based Macs appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/
-
Oracle warns of Agile PLM file disclosure flaw exploited in attacks
Oracle has fixed an unauthenticated file disclosure flaw in Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oracle-warns-of-agile-plm-file-disclosure-flaw-exploited-in-attacks/
-
Microsoft announces Zero Day Quest hacking event with big rewards
Microsoft is enhancing its bug bounty initiatives with the launch of the Zero Day Quest hacking event. With $4 million in potential rewards, it focuses on driving research in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/19/microsoft-zero-day-quest-hacking-event/
-
China-linked actor’s malware DeepData exploits FortiClient VPN zero-day
Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN zero-day and steal credentials. Volexity researchers discovered a vulnerability in Fortinet’s Windows VPN client that China-linked threat actor BrazenBamboo abused in their DEEPDATA malware. BrazenBamboo is known to be the author of other malware families, including LIGHTSPY, DEEPDATA, and DEEPPOST. DEEPDATA is a…
-
Palo Alto Networks tackles firewall-busting zero-days with critical patches
Amazing that these two bugs got into a production appliance, say researchers First seen on theregister.com Jump to article: www.theregister.com/2024/11/19/palo_alto_networks_patches/
-
Palo Alto Sounds Alarm Over PAN-OS Zero Day Attacks
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36613/Palo-Alto-Sounds-Alarm-Over-PAN-OS-Zero-Day-Attacks.html