Tag: zero-day
-
Zero-day vulnerabilities in temperature monitors could leak patient data
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/patchless-temperature-monitor-vulnerabilities-could-leak-patient-data
-
UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html
-
Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw
Crypto exchange Kraken revealed that an unnamed security researcher exploited an extremely critical zero-day flaw in its platform to steal $3 million … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/kraken-crypto-exchange-hit-by-3-million.html
-
Threat Actor Claims 0Day Sandbox Escape RCE in Chrome Browser
A threat actor has claimed to have discovered a zero-day vulnerability in the widely-used Google Chrome browser. The claim was made public via a tweet… First seen on gbhackers.com Jump to article: gbhackers.com/threat-actor-claims-0day-sandbox-escape-rce-in-chrome-browser/
-
Zero-Day Exploits Cheat Sheet: Definition, Examples How It Works
Zero-day exploits use unknown vulnerabilities to infiltrate PCs, networks, mobile phones and IoT devices. For unprepared security teams, these exploit… First seen on techrepublic.com Jump to article: www.techrepublic.com/article/zero-day-exploits-the-smart-persons-guide/
-
Rapid7 warns of alarming zero-day vulnerability trends
The cybersecurity vendor tracked vulnerabilities that were used by threat actors in mass compromise events and found more than half were exploited as … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366585701/Rapid7-warns-of-alarming-zero-day-vulnerability-trends
-
TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability
First seen on theregister.com Jump to article: www.theregister.com/2024/06/05/tiktok_confirms_cnn_accounts_hijacked/
-
Threat Actor Claiming a 0-day in Linux LPE Via GRUB bootloader
A new threat actor has emerged, claiming a zero-day vulnerability in the Linux GRUB bootloader that allows for local privilege escalation (LPE). This … First seen on gbhackers.com Jump to article: gbhackers.com/a-0-day-in-linux-lpe/
-
Exploiting a UseFree Vulnerability in the Linux Kernel: A Zero-Day Threat Emerges
A security threat has surfaced on dark web forums: a zero-day exploit targeting a use-after-free (UAF) vulnerability in the Linux Kernel, specifically… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/use-after-free-vulnerability-in-linux-kernel/
-
Es laufen bereits Angriffe Day-Root-Lücke im Linux-Kernel
First seen on security-insider.de Jump to article: www.security-insider.de/zero-day-root-luecke-im-linux-kernel-a-b51a7c0d86b69b4e63755bae8fba386f/
-
Google Pixel Firmware Zero-Day Flaw Exploited And Patched
Google has recently issued a warning regarding a critical security flaw affecting Google Pixel Firmware, which has been actively exploited as a zero-d… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/google-pixel-firmware-zero-day-flaw-exploited-and-patched/
-
Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day
Google has warned that a security flaw impacting Pixel Firmware has been exploited in the wild as a zero-day.The high-severity vulnerability, tagged a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/google-warns-of-pixel-firmware-security.html
-
Chinese UNC3886 Actors Exploiting VMware, Fortinet 0-days For Spying
In 2021, UNC3886, a suspected China nexus cyber espionage actor, was found to be targeting strategic organizations on a large scale, utilizing multipl… First seen on gbhackers.com Jump to article: gbhackers.com/unc3886-exploit-vmware-fortinet/
-
Multiple zero-days, persistence mechanisms leveraged in Chinese cyberespionage operations
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/multiple-zero-days-persistence-mechanisms-leveraged-in-chinese-cyberespionage-operations
-
Alleged researchers stole $3 million from Kraken exchange
Alleged researchers have exploited a zero-day in Kraken crypto exchange to steal $3 million worth of cryptocurrency. Kraken Chief Security Officer Nic… First seen on securityaffairs.com Jump to article: securityaffairs.com/164694/hacking/kraken-zero-day-cyber-theft.html
-
Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw
Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Re… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/black-basta-ransomware-may-have.html
-
Google’s Zero-Day Hunters Test AI for Security Research
Project Zero Framework Aims to Boost AI Bug Detection Skills. Google’s team of zero-day hunters say artificial intelligence can lead to improved autom… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/googles-zero-day-hunters-test-ai-for-security-research-a-25592
-
Microsoft, Late to the Game on Dangerous DNSSEC Zero-Day Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-late-dangerous-dnssec-zero-day-flaw
-
Cryptohack Roundup: Kraken, CertiK Feud Over Zero-Day, $3M
Tags: zero-dayAlso: UwU Lend’s Hacks, Terraform Labs’ Dissolution, Gemini’s Settlement. This week, CertiK researchers allegedly stole money from Kraken, UwU Lend wa… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-kraken-certik-feud-over-zero-day-3m-a-25583
-
Researchers exploit Kraken exchange bug, steal $3 million in crypto
The Kraken crypto exchange disclosed today that alleged security researchers exploited a zero-day website bug to steal $3 million in cryptocurrency an… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/researchers-exploit-kraken-exchange-bug-steal-3-million-in-crypto/
-
Microsoft handles 2 Windows zero-days on May Patch Tuesday
In addition to the Windows vulnerabilities exploited in the wild, admins should focus on patching multiple flaws in web browsers from Google, Microsof… First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366585000/Microsoft-handles-2-Windows-zero-days-on-May-Patch-Tuesday
-
Zero-day flaw in Check Point VPNs is ‘extremely easy’ to exploit
First seen on techcrunch.com Jump to article: techcrunch.com/2024/05/30/check-point-vpn-zero-day-extremely-easy-to-exploit/
-
Google discloses 2 zero-day vulnerabilities in less than a week
Google released fixed versions to address the two vulnerabilities in its Chrome web browser, but the updates will roll out in stages with no specific … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366585317/Google-discloses-2-zero-day-vulnerabilities-in-less-than-a-week
-
Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers
Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.Tracked as CVE-2024-4… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/arm-warns-of-actively-exploited-zero.html
-
Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html
-
Zero Day: GPT-4 kann selbstständig Sicherheitslücken ausnutzen
Tags: zero-dayFirst seen on golem.de Jump to article: www.golem.de/news/zero-day-gpt-4-kann-selbststaendig-sicherheitsluecken-ausnutzen-2406-185875.html
-
Microsoft Patches One Critical and One Zero-Day Vulnerability
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-patches-critica-zeroday/
-
Black Basta Ransomware Suspected of Exploiting Windows 0-day Before Patch
cybersecurity researchers at Symantec have found strong evidence suggesting that the Black Basta ransomware gang exploited a critical Windows vulnerab… First seen on hackread.com Jump to article: hackread.com/black-basta-ransomware-windows-0-day-patch/
-
Only one critical vulnerability included in May’s Microsoft Patch Tuesday; One other zero-day in DWN Core
First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/microsoft-patch-tuesday-may-2024/
-
Google fixed an actively exploited zero-day in the Pixel Firmware
Google is warning of a security vulnerability impacting its Pixel Firmware that has been actively exploited in the wild as a zero-day. Google warned o… First seen on securityaffairs.com Jump to article: securityaffairs.com/164500/security/google-fixed-pixel-firmware-zero-day.html