Tag: zero-day
-
Apple fixes two zero-days used in attacks on Intel-based Macs
Apple released emergency security updates to fix two zero-day vulnerabilities that were exploited in attacks on Intel-based Mac systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apple-fixes-two-zero-days-used-in-attacks-on-intel-based-macs/
-
Apple Confirms Zero-Day Attacks Hitting macOS Systems
Apple rushes out out major macOS and iOS security updates to cover a pair of vulnerabilities already being exploited in the wild. The post Apple Confirms Zero-Day Attacks Hitting macOS Systems appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/
-
Microsoft launches ‘Zero Day Quest’ competition to enhance cloud and AI security
The tech giant is upping the bounties attached to several popular systems. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-launches-zero-day-quest-competition-to-enhance-cloud-and-ai-security/
-
Fortinet VPN zero-day leveraged in new Chinese credential theft campaign
First seen on scworld.com Jump to article: www.scworld.com/brief/fortinet-vpn-zero-day-leveraged-in-new-chinese-credential-theft-campaign
-
Palo Alto sounds alarm over PAN-OS zero-day attacks
First seen on scworld.com Jump to article: www.scworld.com/news/palo-alto-sounds-alarm-over-pan-os-zero-day-attacks
-
Apple Confirms Zero-Day Attacks Hitting Intel-based Macs
Apple rushes out out major macOS and iOS security updates to cover a pair of vulnerabilities already being exploited in the wild. The post Apple Confirms Zero-Day Attacks Hitting Intel-based Macs appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/
-
Oracle warns of Agile PLM file disclosure flaw exploited in attacks
Oracle has fixed an unauthenticated file disclosure flaw in Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oracle-warns-of-agile-plm-file-disclosure-flaw-exploited-in-attacks/
-
Microsoft announces Zero Day Quest hacking event with big rewards
Microsoft is enhancing its bug bounty initiatives with the launch of the Zero Day Quest hacking event. With $4 million in potential rewards, it focuses on driving research in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/19/microsoft-zero-day-quest-hacking-event/
-
China-linked actor’s malware DeepData exploits FortiClient VPN zero-day
Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN zero-day and steal credentials. Volexity researchers discovered a vulnerability in Fortinet’s Windows VPN client that China-linked threat actor BrazenBamboo abused in their DEEPDATA malware. BrazenBamboo is known to be the author of other malware families, including LIGHTSPY, DEEPDATA, and DEEPPOST. DEEPDATA is a…
-
Palo Alto Networks tackles firewall-busting zero-days with critical patches
Amazing that these two bugs got into a production appliance, say researchers First seen on theregister.com Jump to article: www.theregister.com/2024/11/19/palo_alto_networks_patches/
-
Palo Alto Sounds Alarm Over PAN-OS Zero Day Attacks
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36613/Palo-Alto-Sounds-Alarm-Over-PAN-OS-Zero-Day-Attacks.html
-
Microsoft launches Zero Day Quest hacking event with $4 million in rewards
Microsoft announced today at its Ignite annual conference in Chicago, Illinois, that it’s expanding its bug bounty programs with Zero Day Quest, a new hacking event focusing on cloud and AI products and platforms. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-launches-zero-day-quest-hacking-event-with-4-million-in-rewards/
-
Palo Alto Patches Firewall Zero-Day Exploited in Operation Lunar Peek
Palo Alto Networks has released patches and CVEs for the firewall zero-days exploited in what the company calls Operation Lunar Peek. The post Palo Alto Patches Firewall Zero-Day Exploited in Operation Lunar Peek appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-patches-firewall-zero-day-exploited-in-operation-lunar-peek/
-
PAN-OS Firewall Vulnerability Under Active Exploitation IoCs and Patch Released
Palo Alto Networks has released new indicators of compromise (IoCs) a day after the network security vendor confirmed that a zero-day vulnerability impacting its PAN-OS firewall management interface has been actively exploited in the wild.To that end, the company said it observed malicious activity originating from below IP addresses and targeting PAN-OS management web interface…
-
Chinese hackers exploit Fortinet VPN zero-day to steal credentials
Chinese threat actors use a custom post-exploitation toolkit named ‘DeepData’ to exploit a zero-day vulnerability in Fortinet’s FortiClient Windows VPN client that steal credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/
-
WhatsApp zero-day exploited by NSO Group post lawsuit
First seen on scworld.com Jump to article: www.scworld.com/brief/whatsapp-zero-day-exploited-by-nso-group-post-lawsuit
-
Palo Alto Networks patches two firewall zero-days used in attacks
Palo Alto Networks has finally released security updates for an actively exploited zero-day vulnerability in its Next-Generation Firewalls (NGFW). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-patches-two-firewall-zero-days-used-in-attacks/
-
Palo Alto Networks Patches Critical Zero-Day Firewall Bug
The security vendor’s Expedition firewall appliance’s PAN-OS interface tool has racked up four critical security vulnerabilities under active attack in November, leading tit to advise customers to update immediately or and take them off the Internet. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/palo-alto-networks-patches-critical-zero-day-bug-firewalls
-
Critical Zero-Day Vulnerability in Palo Alto Networks Next-Generation Firewalls (PAN2024-0015)
Summary Palo Alto Networks has identified a critical zero-day vulnerability (PAN-SA-2024-0015) in the PAN-OS software, impacting management interfaces of its Next-Generation Firewalls (NGFW). This vulnerability, First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2024/11/18/critical-zero-day-vulnerability-in-palo-alto-networks-next-generation-firewalls-pan-sa-2024-0015/
-
Attackers are exploiting 2 zero-days in Palo Alto Networks firewalls (CVE-2024-0012, CVE-2024-9474)
Palo Alto Networks has released fixes for two vulnerabilities (CVE-2024-0012 and CVE-2024-9474) in its next-generation firewalls that have been exploited by attackers as … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/18/cve-2024-0012-cve-2024-9474/
-
Discontinued GeoVision Products Targeted in Botnet Attacks via Zero-Day
A zero-day vulnerability affecting five discontinued GeoVision product models has been exploited by a botnet. The post Discontinued GeoVision Products Targeted in Botnet Attacks via Zero-Day appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/discontinued-geovision-products-targeted-in-botnet-attacks-via-zero-day/
-
Palo Alto Networks Releases IoCs for New Firewall Zero-Day
Palo Alto Networks has released IoCs for the attacks exploiting a newly uncovered firewall zero-day vulnerability. The post Palo Alto Networks Releases IoCs for New Firewall Zero-Day appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-releases-iocs-for-new-firewall-zero-day/
-
Fortinet VPN Zero-Day Exploited in Malware Attacks Remains Unpatched: Report
The DeepData malware framework was seen exploiting a Fortinet VPN client for Windows zero-day that remains unpatched. The post Fortinet VPN Zero-Day Exploited in Malware Attacks Remains Unpatched: Report appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/fortinet-vpn-zero-day-exploited-in-malware-attacks-remains-unpatched-report/
-
Palo-Alto: Ungepatchter Zero-Day für Security-Appliances wird ausgenutzt
In der vergangenen Woche hatte Palo Alto Kunden über eine ungepatchte Lücke im Webinterface verschiedener Firewalls informiert. Diese wird nun ausgenutzt. First seen on heise.de Jump to article: www.heise.de/news/Palo-Alto-Ungepatchter-Zero-Day-fuer-Security-Appliances-aufgetaucht-10040500.html
-
Kein Patch verfügbar: Hacker attackieren kritische Lücke in Palo-Alto-Firewalls
Tausende von PAN-Firewalls lassen sich über das Internet verwalten. Aufgrund einer Zero-Day-Lücke in der Schnittstelle haben jetzt auch Hacker Zugriff. First seen on golem.de Jump to article: www.golem.de/news/kein-patch-verfuegbar-hacker-attackieren-kritische-luecke-in-palo-alto-firewalls-2411-190866.html
-
Citrix Virtual Apps Desktops Zero-Day Vulnerability Exploited in the Wild
A critical new vulnerability has been discovered in Citrix’s Virtual Apps and Desktops solution, which is widely used to facilitate secure remote access to desktop applications now exploited in the wild. The vulnerability, which remains unpatched, was detailed last week by Watchtowr Labs in a blog post . This flaw poses a significant threat, as…
-
Palo-Alto: Ungepatchter Zero-Day für Security-Appliances aufgetaucht
In der vergangenen Woche hatte Palo Alto Kunden über eine ungepatchte Lücke im Webinterface verschiedener Firewalls informiert. Diese wird nun ausgenutzt. First seen on heise.de Jump to article: www.heise.de/news/Palo-Alto-Ungepatchter-Zero-Day-fuer-Security-Appliances-aufgetaucht-10040500.html
-
GeoVision 0-Day Vulnerability Exploited in the Wild
Tags: authentication, cve, cvss, cyber, cybersecurity, exploit, flaw, injection, vulnerability, zero-dayCybersecurity researchers have detected the active exploitation of a zero-day vulnerability in GeoVision devices, which the manufacturer no longer supports. The vulnerability, now designated as CVE-2024-11120, has been assigned a high-severity CVSS score of 9.8 and used by a sophisticated botnet. The security flaw is a pre-authentication command injection vulnerability, which allows attackers to execute arbitrary…
-
Security Affairs newsletter Round 498 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A botnet exploits e GeoVision zero-day to compromise EoL devices Palo Alto Networks confirmed active exploitation of recently…
-
Week in review: Microsoft patches actively exploited 0-days, Amazon and HSBC employee data leaked
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/17/week-in-review-microsoft-patches-actively-exploited-0-days-amazon-and-hsbc-employee-data-leaked/