A free, unofficial patch is available for a zero-day local privilege escalation vulnerability in the Windows User Profile Service that lets attackers gain SYSTEM privileges under certain conditions. click here to read full Article...
Google’s Threat Analysis Group (TAG) has revealed that hackers targeting visitors to websites in Hong Kong were using a previously undisclosed, or zero-day, flaw in macOS to spy on people. click here to read...
Researchers have developed an exploit to gain remote code execution via a massive vulnerability in a security appliance from Palo Alto Networks, potentially exposing 10,000 vulnerable firewalls. click here to read full Article Read...
The Cupertino giant has recently rolled out major update for those users who haven’t upgraded… Apple Fixes Critical Bugs, Including A Zero-Day, With Latest iOS 14.8.1 on Latest Hacking News. click here to read...
Researchers have disclosed details about a now-patched critical vulnerability in a time and billing system called BillQuick that was being by a new ransomware group. It can be triggered simply by using login requests...
Multiple ransomware gangs have weaponized and are abusing a zero-day in EntroLink VPN appliances after an exploit was released on an underground cybercrime forum at the start of September 2021. click here to read...
This year, researchers and cybersecurity firms claimed to have discovered the highest number of zero-days under active exploitation. As per recent data, at least 66 zero-days have been found in use this year. click here...
Kaspersky unearthed a cyberespionage campaign exploiting a zero-day flaw in Windows to deliver MysterySnail malware and steal data. A connection to a Chinese-speaking APT was also established. Experts recommend organizations stay proactive and ready...
This week has marked the arrival of scheduled monthly updates from Microsoft. With October Patch… Microsoft October Patch Tuesday Addresses 4 Zero-Day Vulnerabilities on Latest Hacking News. click here to read full Article Read...
Executive Summary In late August and early September 2021, Kaspersky technologies detected attacks with the use of an elevation of privilege exploit on multiple Microsoft Windows servers. The exploit had numerous debug strings from...
Apple on Monday released a security update for iOS and iPad to address a critical vulnerability that it says is being exploited in the wild, making it the 17th zero-day flaw the company has...
Apache has issued patches to address two security vulnerabilities, including a path traversal and file disclosure flaw in its HTTP server that it said is being actively exploited in the wild. click here to...
Apache has issued patches to address two security vulnerabilities, including a path traversal and file disclosure flaw in its HTTP server that it said is being actively exploited in the wild. “A flaw was...
Days after fixing a zero-day bug, Google has patched two more vulnerabilities in Chrome browser… Google Patched Two Further Zero-Day Vulnerabilities With Latest Chrome Browser Release on Latest Hacking News. click here to read...
Google pushed out an emergency Chrome update to fix two zero-days, the second pair this month, that are being exploited in the wild. A dozen such zero-days have been found in 2021. click here...
Mirai_ptea_Rimasuta, an old and unpopular variant of Mirai, has resurfaced to exploit a zero-day vulnerability in RUIJIE router devices. Hacker have redesigned encryption algorithm and C2 communication protocol; it uses the TEA algorithm and encrypts...
