Tag: zero-day
-
A botnet exploits e GeoVision zero-day to compromise EoL devices
A botnet employed in DDoS or cryptomining attacks is exploiting a zero-day in end-of-life GeoVision devices to grow up. Researchers at the Shadowserver Foundation observed a botnet exploiting a zero-day in GeoVision EOL (end-of-Life) devices to compromise devices in the wild. The GeoVision zero-day, tracked as CVE-2024-11120 (CVSS 9.8), is a pre-auth command injection vulnerability…
-
Palo Alto Networks confirmed active exploitation of recently disclosed zero-day
Palo Alto Networks confirmed active exploitation of a zero-day in its PAN-OS firewall and released new indicators of compromise (IoCs). Last week, Palo Alto Networks warned customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability (CVSSv4.0 Base Score: 9.3) in PAN-OS. The cybersecurity company had no…
-
PAN-OS Firewall Vulnerability Under Active Exploitation IoCs Released
Palo Alto Networks has released new indicators of compromise (IoCs) a day after the network security vendor confirmed that a new zero-day vulnerability impacting its PAN-OS firewall management interface has been actively exploited in the wild.To that end, the company said it observed malicious activity originating from below IP addresses and targeting PAN-OS management web…
-
Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials
A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet’s FortiClient for Windows to extract VPN credentials as part of a modular framework called DEEPDATA.Volexity, which disclosed the findings Friday, said it identified the zero-day exploitation of the credential disclosure vulnerability in July 2024, describing BrazenBamboo as the developer behind DEEPDATA,…
-
Zero-Day Vulnerability in FortiClient Exploited by BrazenBamboo APT
Cybersecurity firm Volexity has uncovered a zero-day vulnerability in Fortinet’s Windows VPN client, FortiClient, being exploited by the BrazenBamboo Advanced Persistent Threat (APT) group. This vulnerability, detailed in Volexity’s latest... First seen on securityonline.info Jump to article: securityonline.info/zero-day-vulnerability-in-forticlient-exploited-by-brazenbamboo-apt/
-
NSO Group used another WhatsApp zero-day after being sued, court docs say
Israeli surveillance firm NSO Group reportedly used multiple zero-day exploits, including an unknown one named “Erised,” that leveraged WhatsApp vulnerabilities to deploy Pegasus spyware in zero-click attacks, even after getting sued. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/nso-group-used-another-whatsapp-zero-day-after-being-sued-court-docs-say/
-
Botnet exploits GeoVision zero-day to install Mirai malware
A malware botnet is exploiting a zero-day vulnerability in end-of-life GeoVision devices to compromise and recruit them for likely DDoS or cryptomining attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/botnet-exploits-geovision-zero-day-to-install-mirai-malware/
-
Palo Alto Reports Firewalls Exploited Using an Unknown Flaw
Tags: attack, cybersecurity, exploit, firewall, flaw, Internet, network, update, vulnerability, zero-dayNo Patch Yet; Management Interface Lockdown Blunts Attacks, Networking Giant Says. Attackers are exploiting a zero-day vulnerability in some types of Palo Alto Networks firewalls, the cybersecurity giant warned. While details of the flaw remain scant – no patch is available – the vendor urged customers to ensure their firewall management interfaces are not internet-exposed.…
-
Five Eyes infosec agencies list 2023’s most exploited software flaws
Slack patching remains a problem which is worrying as crooks increasingly target zero-day vulns First seen on theregister.com Jump to article: www.theregister.com/2024/11/14/five_eyes_2023_top_vulnerabilities/
-
Palo Alto Networks Confirms New Zero-Day Being Exploited by Threat Actors
The security provider has elevated its warning about a vulnerability affecting firewall management interfaces after observing active exploitation First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/palo-alto-confirms-new-0day/
-
Open source LLM tool primed to sniff out Python zero-days
First seen on theregister.com Jump to article: www.theregister.com/2024/10/20/python_zero_day_tool/
-
Palo Alto Networks warns of critical RCE zero-day exploited in attacks
Palo Alto Networks is warning that a critical zero-day vulnerability on Next-Generation Firewalls (NGFW) management interfaces, currently tracked as ‘PAN-SA-2024-0015,’ is actively being exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-critical-rce-zero-day-exploited-in-attacks/
-
watchTowr Finds New Zero-Day Vulnerability in Fortinet Products
The new vulnerability was named “FortiJump Higher” due to its similarity with the “FortiJump” vulnerability discovered in October First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/watchtowr-new-vulnerability/
-
Palo Alto Networks Confirms New Firewall Zero-Day Exploitation
Palo Alto Networks has confirmed that a zero-day is being exploited in attacks after investigating claims of a firewall remote code execution flaw. The post Palo Alto Networks Confirms New Firewall Zero-Day Exploitation appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-confirms-new-firewall-zero-day-exploitation/
-
Zero-Day Exploits Surge in 2023, Cisco, Fortinet Vulnerabilities Targeted
A report from the Five Eyes cybersecurity alliance, released by the CISA, highlights the majority of the most exploited vulnerabilities last year were initially zero-day flaws, a significant increase compared to 2022 when less than half of the top vulnerabilities were zero-day exploits. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/zero-day-exploits-surge-in-2023-cisco-fortinet-vulnerabilities-targeted/
-
Zero-Day-Schwachstellen gefunden – Erneuter Fehler in Googles Android-Framework
First seen on security-insider.de Jump to article: www.security-insider.de/google-warnung-sicherheitsluecke-android-framework-a-347b05adfbcffd4c0b146d9addc28cf3/
-
Newly patched Windows zero-day leveraged to attack Ukraine
First seen on scworld.com Jump to article: www.scworld.com/brief/newly-patched-windows-zero-day-leveraged-to-attack-ukraine
-
Zero-day flaw behind Rackspace breach still a mystery
More than two weeks after threat actors exploited a zero-day vulnerability in a third-party utility to breach Rackspace, the details about the flaw an… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366613555/Zero-day-flaw-behind-Rackspace-breach-still-a-mystery
-
Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions
The exploit for a new zero-day vulnerability in Windows is executed by deleting files, drag-and-dropping them, or right clicking on them. The post Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/windows-zero-day-exploited-by-russia-triggered-with-file-drag-and-drop-delete-actions/
-
How a Windows zero-day was exploited in the wild for months (CVE-2024-43451)
CVE-2024-43451, a Windows zero-day vulnerability for which Microsoft released a fix on November 2024 Patch Tuesday, has been exploited since at least April 2024, ClearSky … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/14/cve-2024-43451-exploited/
-
Five Eyes infosec agencies list 2024’s most exploited software flaws
Slack patching remains a problem which is worrying as crooks increasingly target zero-day vulns First seen on theregister.com Jump to article: www.theregister.com/2024/11/14/five_eyes_2024_top_vulnerabilities/
-
Windows 0-Day Exploited in Wild with Single Right Click
A newly discovered zero-day vulnerability, CVE-2024-43451, has been actively exploited in the wild, targeting Windows systems across various versions. This critical vulnerability, uncovered by the ClearSky Cyber Security team in June 2024, has been linked to attacks aimed specifically at Ukrainian organizations. The exploit allows malicious actors to gain control of a system through seemingly innocuous…
-
Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails
A newly patched security flaw impacting Windows NT LAN Manager (NTLM) was exploited as a zero-day by a suspected Russia-linked actor as part of cyber attacks targeting Ukraine.The vulnerability in question, CVE-2024-43451 (CVSS score: 6.5), refers to an NTLM hash disclosure spoofing vulnerability that could be exploited to steal a user’s NTLMv2 hash. It was…
-
Zero-days dominate top frequently exploited vulnerabilities
A joint report by leading cybersecurity agencies from the U.S., UK, Canada, Australia, and New Zealand has identified the most commonly exploited vulnerabilities of 2023. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/14/top-exploited-vulnerabilities-2023/
-
Right-Click to Hack: Zero-Day CVE-2024-43451 Vulnerability Targets Windows Users
ClearSky Cyber Security has uncovered a new zero-day vulnerability, CVE-2024-43451, actively exploited in the wild, targeting Windows systems primarily in Ukraine. This flaw enables attackers to exploit URL files for... First seen on securityonline.info Jump to article: securityonline.info/right-click-to-hack-zero-day-cve-2024-43451-vulnerability-targets-windows-users/
-
Zero-Days Win the Prize for Most Exploited Vulns
Among the top exploited zero-day vulnerabilities were bugs found in systems from Citrix and Cisco. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/zero-days-wins-superlative-most-exploited-vulns
-
Microsoft patches Windows zero-day exploited in attacks on Ukraine
Suspected Russian hackers were caught exploiting a recently patched Windows vulnerability as a zero-day in ongoing attacks targeting Ukrainian entities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-patches-windows-zero-day-exploited-in-attacks-on-ukraine/
-
Citrix Patches Zero-Day Recording Manager Bugs
There is some disagreement over whether the remote code execution (RCE) security flaws allow for unauthenticated exploitation or not. Citrix says no, but researchers say the company is downplaying a good old unauthenticated RCE. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-patches-zero-day-recording-manager-bugs
-
Zero-day vulnerability exploitation escalates
First seen on scworld.com Jump to article: www.scworld.com/brief/zero-day-vulnerability-exploitation-escalates