Tag: zero-day
-
Microsoft’s November Patch Tuesday Fixes 91 Vulnerabilities, 4 Zero-Days
Microsoft’s November 2024 Patch Tuesday update fixes 91 security vulnerabilities, including four zero-day vulnerabilities. Critical fixes address actively… First seen on hackread.com Jump to article: hackread.com/microsofts-november-patch-tuesday-fix-91-vulnerabilities/
-
Microsoft Patch Tuesday security updates for November 2024 fix two actively exploited zero-days
Microsoft Patch Tuesday security updates for November 2024 addressed 89 vulnerabilities, including two actively exploited zero-day flaws. Microsoft Patch Tuesday security updates for November 2024 fixed 89 vulnerabilities in Windows and Windows Components; Office and Office Components; Azure; .NET and Visual Studio; LightGBM; Exchange Server; SQL Server; TorchGeo; Hyper-V; and Windows VMSwitch. Four of these…
-
Microsoft Confirms Zero-Day Exploitation of Task Scheduler Flaw
Patch Tuesday: Microsoft patches 90 security flaws across the Windows ecosystem warns of zero-day exploitation and code execution risks. The post Microsoft Confirms Zero-Day Exploitation of Task Scheduler Flaw appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-confirms-zero-day-exploitation-of-task-scheduler-flaw/
-
Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 91 flaws
Today is Microsoft’s November 2024 Patch Tuesday, which includes security updates for 91 flaws, including four zero-days, two of which are actively exploited. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-november-2024-patch-tuesday-fixes-4-zero-days-91-flaws/
-
Vulnerability Recap 10/28/24 Phishing, DoS, RCE a Zero-Day
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-october-28-2024/
-
Citrix Issues Patches for Zero-Day Recording Manager Bugs
There is some disagreement over whether the remote code execution (RCE) security flaws allow for unauthenticated exploitation or not. Citrix says no, but researchers say the company is downplaying a good old unauthenticated RCE. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-patches-zero-day-recording-manager-bugs
-
Citrix ‘Recording Manager’ Zero-Day Bug Allows Unauthenticated RCE
The security vulnerability is due to an exposed Microsoft Message Queuing (MSMQ) instance and the use of the insecure BinaryFormatter. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-recording-manager-zero-day-bug-unauthenticated-rce
-
Surge in exploits of zero-day vulnerabilities is ‘new normal’ warns Five Eyes alliance
First seen on therecord.media Jump to article: therecord.media/surge-zero-day-exploits-five-eyes-report
-
New Citrix Zero-Day Vulnerability Allows Remote Code Execution
watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/new-citrix-zeroday-vulnerability/
-
ISMG Editors: US Election Impact on Cybersecurity, HIPAA
Tags: ai, cybersecurity, election, google, government, healthcare, HIPAA, intelligence, privacy, update, zero-dayAlso: Potential Government Policy Changes; AI-Driven Zero-Day Discoveries. In the latest weekly update, ISMG editors discussed how the recent election results may reshape U.S. cybersecurity policy and healthcare privacy under HIPAA and the groundbreaking role of artificial intelligence in Google’s recent discovery of a critical zero-day vulnerability. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-us-election-impact-on-cybersecurity-hipaa-a-26775
-
Ivanti zero-day vulnerabilities exploited in chained attack
The new exploit chains targeting Ivanti Cloud Service Application customers are connected to a previously disclosed critical path traversal flaw, CVE-… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366613041/Ivanti-zero-day-vulnerabilities-exploited-in-chained-attack
-
Breach Roundup: Chinese Cyberespionage Using Open-Source VPN
Tags: breach, china, cybercrime, cyberespionage, germany, google, hacker, hacking, mfa, okta, open-source, ransomware, vpn, zero-dayAlso: Ransomware Hackers Demand Baguettes. This week, Chinese spying, Italian hacking scandal, an FBI warning and Okta fixed a bug. Google mandated MFA, zero days in PTZOptics and a Mexican airport didn’t pay ransom. Cybercriminals demanded baguettes, breach lettersin Ohio and Germany will shield white hats. The Italian DPA rebuked a bank. First seen on…
-
Neue Zero-Day-Spoofing-Schwachstelle in Windows – Microsofts Patch für CVE-2024-21320 ist nutzlos
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-cve-2024-21320-patch-leaking-ntlm-anmeldedaten-a-3b0ef2b5c786558a92ef33c2da2f4997/
-
70 Zero-Day-Lücken ausgenutzt: Pwn2Own-Hacker knacken Samsung Galaxy S24 und mehr
First seen on golem.de Jump to article: www.golem.de/news/70-zero-day-luecken-ausgenutzt-pwn2own-hacker-knacken-samsung-galaxy-s24-und-mehr-2410-190238.html
-
High-severity Qualcomm zero-day vulnerability under attack
Qualcomm urges customers to patch the memory corruption vulnerability as Google researchers have observed targeted exploitation in the wild against th… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366612994/High-severity-Qualcomm-zero-day-vulnerability-under-attack
-
Microsoft repairs 2 zero-days on October Patch Tuesday
First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366613059/Microsoft-repairs-2-zero-days-on-October-Patch-Tuesday
-
Five zero-days to be fixed on October Patch Tuesday
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366613194/Five-zero-days-to-be-fixed-on-October-Patch-Tuesday
-
CVSS 9.8 für ScienceLogic SL1 Day-Schwachstelle in ScienceLogic-Monitoring
First seen on security-insider.de Jump to article: www.security-insider.de/-rackspace-warnung-sciencelogic-schwachstelle-update-a-f4569fd7f0bd9e251be849563276c808/
-
Breach Roundup: Chinese Cyberespionage Using Open Source VPN
Tags: breach, china, cybercrime, cyberespionage, germany, google, hacker, hacking, mfa, okta, open-source, ransomware, vpn, zero-dayAlso: Ransomware Hackers Demand Baguettes. This week, Chinese spying, Italian hacking scandal, an FBI warning and Okta fixed a bug. Google mandated MFA, zero days in PTZOptics and a Mexican airport didn’t pay ransom. Cybercriminals demanded baguettes, breach lettersin Ohio and Germany will shield white hats. The Italian DPA rebuked a bank. First seen on…
-
Wiz CEO and Co-Founder Assaf Rappaport: From Zero-Day to Hero
Fresh off a $1 billion funding round, Wiz has shot to fame as one of the fastest-growing, impactful cloud security startups ever. And one of the most … First seen on techcrunch.com Jump to article: techcrunch.com/video/wiz-ceo-and-co-founder-assaf-rappaport-from-zero-day-to-hero/
-
Google fixes two Android zero-days used in targeted attacks
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-fixes-two-android-zero-days-used-in-targeted-attacks/
-
Windows Themes 0-Day Bug Exposes Users To NTLM Credential Theft
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36541/Windows-Themes-0-Day-Bug-Exposes-Users-To-NTLM-Credential-Theft.html
-
Fortinet finds more malicious IPs linked to widely exploited zero-day
The cybersecurity vendor said the additional indicators of compromise don’t reflect any major changes. Researchers warn thousands of devices remain ex… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/fortinet-cve-indicators-compromise/731616/
-
Google Patched 40 Security Vulnerabilities Along With Two Zero-Days
Google has released a batch of security updates addressing 40 vulnerabilities, two of which are critical zero-day exploits. As reported in the Novembe… First seen on gbhackers.com Jump to article: gbhackers.com/google-patched-40-security-vulnerabilities/
-
Google AI Agent Finds Zero-Day in Popular Database Engine
Now-Fixed Flaw Is Big Sleep’s First Real-World Bug Find, Say Researchers. Google’s highly experimental artificial intelligence agent Big Sleep has aut… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/google-ai-agent-finds-zero-day-in-popular-database-engine-a-26730
-
Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/lazarus-group-exploits-google-chrome.html
-
Inoffizieller Fix für 0-day Windows-Themes-Schwachstelle
In Windows (7 bis 11) gibt es eine Windows Themes Spoofing-Schwachstelle, die bisher nicht durch Microsoft geschlossen wurde. Die Entwickler von ACROS… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/10/30/inoffizieller-fix-fuer-0-day-windows-themes-schwachstelle/
-
PTZOptics cameras zero-days actively exploited in the wild
Hackers are exploiting two zero-day vulnerabilities, tracked as CVE-2024-8956 and CVE-2024-8957, in PTZOptics cameras. Threat actors are attempting to… First seen on securityaffairs.com Jump to article: securityaffairs.com/170456/hacking/ptzoptics-cameras-flaws-exploited.html
-
Synology hurries out patches for zero-days exploited at Pwn2Own
Synology, a Taiwanese network-attached storage (NAS) appliance maker, patched two critical zero-days exploited during last week’s Pwn2Own hacking comp… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/synology-fixed-two-critical-zero-days-exploited-at-pwn2own-within-days/
-
Open Source LLM Tool Sniffs Out Python Zero-Days
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/open-source-llm-tool-finds-python-zero-days