Collaborate Disseminate
A Windows zero-day tracked as CVE-2023-28252 and fixed by Microsoft with its April Patch Tuesday updates has been exploited in Nokoyawa ransomware attacks.
The post Windows Zero-Day Exploited in Nokoyawa Ransomware Attacks appeared first on SecurityWe… Continue reading Windows Zero-Day Exploited in Nokoyawa Ransomware Attacks
A bug to hack your browser, then a bug to pwn the kernel… reported from the wild by Amnesty International.
Continue reading Apple issues emergency patches for spyware-style 0-day exploits – update now!
This blog was made possible through contributions from Fred Chidsey and Joseph Lozowski. The X-Force Vulnerability and Exploit Database shows that the number of zero days being released each year is on the rise, but X-Force has observed that only a few of these zero days are rapidly adopted by cyber criminals each year. While […]
The post X-Force Prevents Zero Day from Going Anywhere appeared first on Security Intelligence.
Continue reading X-Force Prevents Zero Day from Going Anywhere
Google has linked several zero-day vulnerabilities used last year to target Android and iOS devices to commercial spyware vendors.
The post Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors appeared first on SecurityWeek.
Continue reading Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors
Got an older iPhone that can’t run iOS 16? You’ve got a zero-day to deal with! That super-cool Studio Display monitor needs patching, too.
Continue reading Apple patches everything, including a zero-day fix for iOS 15 users
An impressive array of hacks were demonstrated at the first day of the Pwn2Own conference in Vancouver:
On the first day of Pwn2Own Vancouver 2023, security researchers successfully demoed Tesla Model 3, Windows 11, and macOS zero-day exploits and exploit chains to win $375,000 and a Tesla Model 3.
The first to fall was Adobe Reader in the enterprise applications category after Haboob SA’s Abdul Aziz Hariri (@abdhariri) used an exploit chain targeting a 6-bug logic chain abusing multiple failed patches which escaped the sandbox and bypassed a banned API list on macOS to earn $50,000…
Mandiant has conducted an analysis of the zero-day vulnerabilities disclosed in 2022 and over a dozen were linked to cyberespionage groups.
The post Exploitation of 55 Zero-Day Vulnerabilities Came to Light in 2022: Mandiant appeared first on SecurityW… Continue reading Exploitation of 55 Zero-Day Vulnerabilities Came to Light in 2022: Mandiant
Mandiant links exploitation of the Fortinet zero-day CVE-2022-41328, exploited in government attacks, to a Chinese cyberespionage group.
The post Exploitation of Recent Fortinet Zero-Day Linked to Chinese Cyberspies appeared first on SecurityWeek.
Continue reading Exploitation of Recent Fortinet Zero-Day Linked to Chinese Cyberspies
An email you haven’t even looked at yet could be used to trick Outlook into helping crooks to logon as you. Continue reading Microsoft fixes two 0-days on Patch Tuesday – update now!
Zero-day attacks are on the rise. Not only was 2021 a record-breaking year for the total number of zero-day attacks, but it also accounted for 40% of the zero-day breaches over the last decade. In part, this race to zero is tied to the sheer number of web, mobile and cloud-based applications being developed and […]
The post Zero-Day Exploits: The Anatomy of Unexpected Attacks appeared first on Security Intelligence.
Continue reading Zero-Day Exploits: The Anatomy of Unexpected Attacks