Tag: zero-day
-
Wiz CEO and Co-Founder Assaf Rappaport: From Zero-Day to Hero
Fresh off a $1 billion funding round, Wiz has shot to fame as one of the fastest-growing, impactful cloud security startups ever. And one of the most … First seen on techcrunch.com Jump to article: techcrunch.com/video/wiz-ceo-and-co-founder-assaf-rappaport-from-zero-day-to-hero/
-
Google fixes two Android zero-days used in targeted attacks
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-fixes-two-android-zero-days-used-in-targeted-attacks/
-
Windows Themes 0-Day Bug Exposes Users To NTLM Credential Theft
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36541/Windows-Themes-0-Day-Bug-Exposes-Users-To-NTLM-Credential-Theft.html
-
Fortinet finds more malicious IPs linked to widely exploited zero-day
The cybersecurity vendor said the additional indicators of compromise don’t reflect any major changes. Researchers warn thousands of devices remain ex… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/fortinet-cve-indicators-compromise/731616/
-
Google Patched 40 Security Vulnerabilities Along With Two Zero-Days
Google has released a batch of security updates addressing 40 vulnerabilities, two of which are critical zero-day exploits. As reported in the Novembe… First seen on gbhackers.com Jump to article: gbhackers.com/google-patched-40-security-vulnerabilities/
-
Google AI Agent Finds Zero-Day in Popular Database Engine
Now-Fixed Flaw Is Big Sleep’s First Real-World Bug Find, Say Researchers. Google’s highly experimental artificial intelligence agent Big Sleep has aut… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/google-ai-agent-finds-zero-day-in-popular-database-engine-a-26730
-
Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/lazarus-group-exploits-google-chrome.html
-
Inoffizieller Fix für 0-day Windows-Themes-Schwachstelle
In Windows (7 bis 11) gibt es eine Windows Themes Spoofing-Schwachstelle, die bisher nicht durch Microsoft geschlossen wurde. Die Entwickler von ACROS… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/10/30/inoffizieller-fix-fuer-0-day-windows-themes-schwachstelle/
-
PTZOptics cameras zero-days actively exploited in the wild
Hackers are exploiting two zero-day vulnerabilities, tracked as CVE-2024-8956 and CVE-2024-8957, in PTZOptics cameras. Threat actors are attempting to… First seen on securityaffairs.com Jump to article: securityaffairs.com/170456/hacking/ptzoptics-cameras-flaws-exploited.html
-
Synology hurries out patches for zero-days exploited at Pwn2Own
Synology, a Taiwanese network-attached storage (NAS) appliance maker, patched two critical zero-days exploited during last week’s Pwn2Own hacking comp… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/synology-fixed-two-critical-zero-days-exploited-at-pwn2own-within-days/
-
Open Source LLM Tool Sniffs Out Python Zero-Days
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/open-source-llm-tool-finds-python-zero-days
-
Active exploitation of PTZOptics zero-days underway
First seen on scworld.com Jump to article: www.scworld.com/brief/active-exploitation-of-ptzoptics-zero-days-underway
-
Hackers target critical zero-day vulnerability in PTZ cameras
Hackers are attempting to exploit two zero-day vulnerabilities in PTZOptics pan-tilt-zoom (PTZ) live streaming cameras used in industrial, healthcare,… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-target-critical-zero-day-vulnerability-in-ptz-cameras/
-
QNAP fixed second zero-day demonstrated at Pwn2Own Ireland 2024
QNAP addressed the second zero-day vulnerability demonstrated by security researchers during the recent Pwn2Own Ireland 2024. Taiwanese manufacturer Q… First seen on securityaffairs.com Jump to article: securityaffairs.com/170423/security/qnap-fixed-second-zero-day-demonstrated-pwn2own-ireland-2024.html
-
ACROS Releases Unofficial Fixes for Windows Themes Zero-Day
First seen on scworld.com Jump to article: www.scworld.com/brief/acros-releases-unofficial-fixes-for-windows-themes-zero-day
-
Critical QNAP HBS zero-day addressed
Tags: zero-dayFirst seen on scworld.com Jump to article: www.scworld.com/brief/critical-qnap-hbs-zero-day-addressed
-
QNAP fixed NAS backup zero-day demonstrated at Pwn2Own Ireland 2024
QNAP fixed critical zero-day CVE-2024-50388 which was demonstrated against a TS-464 NAS device during the Pwn2Own Ireland 2024 competition. QNAP addre… First seen on securityaffairs.com Jump to article: securityaffairs.com/170386/uncategorized/qnap-fixed-zero-day-cve-2024-50388-pwn2own-ireland-2024.html
-
Unofficial fixes issued for Windows Themes zero-day
First seen on scworld.com Jump to article: www.scworld.com/brief/unofficial-fixes-issued-for-windows-themes-zero-day
-
CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Expl… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/cisa-adds-sciencelogic-sl1.html
-
QNAP patches second zero-day exploited at Pwn2Own to get root
QNAP has fixed a second zero-day vulnerability exploited at the Pwn2Own Ireland 2024 hacking contest to gain a root shell and take over a TS-464 NAS d… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qnap-patches-second-zero-day-exploited-at-pwn2own-to-get-root/
-
New Windows Themes zero-day gets free, unofficial patches
Free unofficial patches are now available for a new Windows Themes zero-day vulnerability that allows attackers to steal a target’s NTLM credentials r… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-windows-themes-zero-day-gets-free-unofficial-patches/
-
Researchers Discover Over 70 Zero-Day Bugs at Pwn2Own Ireland
Tags: zero-dayFirst seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/researchers-70-zeroday-bugspwn/
-
QNAP fixes NAS backup software zero-day exploited at Pwn2Own
QNAP has fixed a critical zero-day vulnerability exploited by security researchers on Thursday to hack a TS-464 NAS device during the Pwn2Own Ireland … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qnap-fixes-nas-backup-software-zero-day-exploited-at-pwn2own/
-
Samsung Zero-Day Vuln Under Active Exploit, Google Warns
First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/samsung-zero-day-vuln-under-active-exploit-google-warns
-
Fortinet zero-day attack spree hits at least 50 customers
Active exploits of a critical vulnerability in FortiManager began in late June, Mandiant said. Firewall credentials and configuration data have been s… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/fortinet-zero-day-attack-spree/730894/
-
Fortinet Confirms Exploitation of Critical FortiManager Zero-Day Vulnerability
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fortinet-exploitation-fortimanager/
-
UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575)
Fortinet and Mandiant investigated the mass exploitation of FortiManager devices via CVE-2024-47575, impacting 50+ systems across industries. Threat….. First seen on hackread.com Jump to article: hackread.com/unc5820-exploits-fortimanager-zero-day-vulnerability/
-
DPRK Uses Microsoft Zero-Day in No-Click Toast Attacks
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/dprk-microsoft-zero-day-no-click-toast-attacks
-
Over 70 zero-day flaws get hackers $1 million at Pwn2Own Ireland
The fourth day of Pwn2Own Ireland 2024 marked the end of the hacking competition with more than $1 million in prizes for over 70 unique zero-day vulne… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-70-zero-day-flaws-get-hackers-1-million-at-pwn2own-ireland/