Tag: zero-day
-
Zero-days from top security vendors were most exploited CVEs in 2023
The top five vulnerabilities exploited by attackers last were found in security gear from Citrix, Cisco and Fortinet, the Five Eyes’ cyber agencies found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/security-vendors-zero-days-top-cve-exploits/732814/
-
Citrix, Cisco, Fortinet Zero-Days Among 2023’s Most Exploited Vulnerabilities
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36592/Citrix-Cisco-Fortinet-Zero-Days-Among-2023s-Most-Exploited-Vulnerabilities.html
-
Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 89 flaws
Today is Microsoft’s November 2024 Patch Tuesday, which includes security updates for 89 flaws, including four zero-days, two of which are actively exploited. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-november-2024-patch-tuesday-fixes-4-zero-days-89-flaws/
-
Citrix, Cisco, Fortinet Zero-Days Among 2023s Most Exploited Vulnerabilities
Most of the top frequently exploited vulnerabilities in 2023 were initially exploited as zero-days, according to data from government agencies. The post Citrix, Cisco, Fortinet Zero-Days Among 2023s Most Exploited Vulnerabilities appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/citrix-cisco-fortinet-zero-days-among-2023s-most-exploited-vulnerabilities/
-
Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine
Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model (LLM) assisted framework c… First seen on thehackernews.com Jump to article: thehackernews.com/2024/11/googles-ai-tool-big-sleep-finds-zero.html
-
Microsoft Fixes Four More Zero-Days in November Patch Tuesday
Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-four-zerodays-november/
-
2 Zero-Day Bugs in Microsoft’s Nov. Update Under Active Exploit
The November 2024 Patch Tuesday update contains a substantially high percentage of remote code execution (RCE) vulnerabilities (including a critical issue in Windows Kerberos), and two other zero-day bugs that have been previously disclosed and could soon come under attack. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/2-zero-day-bugs-microsoft-nov-update-active-exploit
-
Microsoft’s November 2024 Patch Tuesday Addresses 91 Vulnerabilities, Including Four Critical Zero-Days
Microsoft rolled out its monthly security updates as part of the Microsoft November 2024 Patch Tuesday cycle. The company addressed a total of 91 vulnerabilities, with four of them being classified as zero-day vulnerabilities that were actively exploited in the wild. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/microsoft-november-2024-patch-tuesday/
-
Microsoft Security Update Summary (12. November 2024)
Am 12. November 2024 hat Microsoft Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherheitsupdates beseitigen 87 Schwachstellen (CVEs), davon vier kritische Sicherheitslücken, davon 4 als 0-day klassifiziert (zwei werden bereits ausgenutzt). Nachfolgend … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/11/13/microsoft-security-update-summary-12-november-2024/
-
Microsoft’s November Patch Tuesday Fixes 91 Vulnerabilities, 4 Zero-Days
Microsoft’s November 2024 Patch Tuesday update fixes 91 security vulnerabilities, including four zero-day vulnerabilities. Critical fixes address actively… First seen on hackread.com Jump to article: hackread.com/microsofts-november-patch-tuesday-fix-91-vulnerabilities/
-
Microsoft Patch Tuesday security updates for November 2024 fix two actively exploited zero-days
Microsoft Patch Tuesday security updates for November 2024 addressed 89 vulnerabilities, including two actively exploited zero-day flaws. Microsoft Patch Tuesday security updates for November 2024 fixed 89 vulnerabilities in Windows and Windows Components; Office and Office Components; Azure; .NET and Visual Studio; LightGBM; Exchange Server; SQL Server; TorchGeo; Hyper-V; and Windows VMSwitch. Four of these…
-
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)
November 2024 Patch Tuesday is here, and Microsoft has dropped fixes for 89 new security issues in its various products, two of which CVE-2024-43451 and CVE-2024-49039 … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/12/cve-2024-43451-cve-2024-49039/
-
Microsoft Confirms Zero-Day Exploitation of Task Scheduler Flaw
Patch Tuesday: Microsoft patches 90 security flaws across the Windows ecosystem warns of zero-day exploitation and code execution risks. The post Microsoft Confirms Zero-Day Exploitation of Task Scheduler Flaw appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-confirms-zero-day-exploitation-of-task-scheduler-flaw/
-
Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 91 flaws
Today is Microsoft’s November 2024 Patch Tuesday, which includes security updates for 91 flaws, including four zero-days, two of which are actively exploited. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-november-2024-patch-tuesday-fixes-4-zero-days-91-flaws/
-
Vulnerability Recap 10/28/24 Phishing, DoS, RCE a Zero-Day
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-october-28-2024/
-
Citrix ‘Recording Manager’ Zero-Day Bug Allows Unauthenticated RCE
The security vulnerability is due to an exposed Microsoft Message Queuing (MSMQ) instance and the use of the insecure BinaryFormatter. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-recording-manager-zero-day-bug-unauthenticated-rce
-
Citrix Issues Patches for Zero-Day Recording Manager Bugs
There is some disagreement over whether the remote code execution (RCE) security flaws allow for unauthenticated exploitation or not. Citrix says no, but researchers say the company is downplaying a good old unauthenticated RCE. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-patches-zero-day-recording-manager-bugs
-
Surge in exploits of zero-day vulnerabilities is ‘new normal’ warns Five Eyes alliance
First seen on therecord.media Jump to article: therecord.media/surge-zero-day-exploits-five-eyes-report
-
New Citrix Zero-Day Vulnerability Allows Remote Code Execution
watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/new-citrix-zeroday-vulnerability/
-
ISMG Editors: US Election Impact on Cybersecurity, HIPAA
Tags: ai, cybersecurity, election, google, government, healthcare, HIPAA, intelligence, privacy, update, zero-dayAlso: Potential Government Policy Changes; AI-Driven Zero-Day Discoveries. In the latest weekly update, ISMG editors discussed how the recent election results may reshape U.S. cybersecurity policy and healthcare privacy under HIPAA and the groundbreaking role of artificial intelligence in Google’s recent discovery of a critical zero-day vulnerability. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-us-election-impact-on-cybersecurity-hipaa-a-26775
-
Ivanti zero-day vulnerabilities exploited in chained attack
The new exploit chains targeting Ivanti Cloud Service Application customers are connected to a previously disclosed critical path traversal flaw, CVE-… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366613041/Ivanti-zero-day-vulnerabilities-exploited-in-chained-attack
-
Breach Roundup: Chinese Cyberespionage Using Open-Source VPN
Tags: breach, china, cybercrime, cyberespionage, germany, google, hacker, hacking, mfa, okta, open-source, ransomware, vpn, zero-dayAlso: Ransomware Hackers Demand Baguettes. This week, Chinese spying, Italian hacking scandal, an FBI warning and Okta fixed a bug. Google mandated MFA, zero days in PTZOptics and a Mexican airport didn’t pay ransom. Cybercriminals demanded baguettes, breach lettersin Ohio and Germany will shield white hats. The Italian DPA rebuked a bank. First seen on…
-
Neue Zero-Day-Spoofing-Schwachstelle in Windows – Microsofts Patch für CVE-2024-21320 ist nutzlos
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-cve-2024-21320-patch-leaking-ntlm-anmeldedaten-a-3b0ef2b5c786558a92ef33c2da2f4997/
-
70 Zero-Day-Lücken ausgenutzt: Pwn2Own-Hacker knacken Samsung Galaxy S24 und mehr
First seen on golem.de Jump to article: www.golem.de/news/70-zero-day-luecken-ausgenutzt-pwn2own-hacker-knacken-samsung-galaxy-s24-und-mehr-2410-190238.html
-
High-severity Qualcomm zero-day vulnerability under attack
Qualcomm urges customers to patch the memory corruption vulnerability as Google researchers have observed targeted exploitation in the wild against th… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366612994/High-severity-Qualcomm-zero-day-vulnerability-under-attack
-
Microsoft repairs 2 zero-days on October Patch Tuesday
First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366613059/Microsoft-repairs-2-zero-days-on-October-Patch-Tuesday
-
Five zero-days to be fixed on October Patch Tuesday
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366613194/Five-zero-days-to-be-fixed-on-October-Patch-Tuesday
-
CVSS 9.8 für ScienceLogic SL1 Day-Schwachstelle in ScienceLogic-Monitoring
First seen on security-insider.de Jump to article: www.security-insider.de/-rackspace-warnung-sciencelogic-schwachstelle-update-a-f4569fd7f0bd9e251be849563276c808/
-
Breach Roundup: Chinese Cyberespionage Using Open Source VPN
Tags: breach, china, cybercrime, cyberespionage, germany, google, hacker, hacking, mfa, okta, open-source, ransomware, vpn, zero-dayAlso: Ransomware Hackers Demand Baguettes. This week, Chinese spying, Italian hacking scandal, an FBI warning and Okta fixed a bug. Google mandated MFA, zero days in PTZOptics and a Mexican airport didn’t pay ransom. Cybercriminals demanded baguettes, breach lettersin Ohio and Germany will shield white hats. The Italian DPA rebuked a bank. First seen on…