Mobile & Wireless
Predator spyware delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and MitM attacks.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Zero-Day"
Mobile & Wireless
Apple has patched 3 zero-day vulnerabilities that have likely been exploited by a spyware vendor to hack iPhones.
Endpoint Security
Trend Micro has patched CVE-2023-41179, an Apex One zero-day code execution vulnerability that has been exploited in attacks.
Malware & Threats
After Apple and Google, Mozilla has also patched an image processing-related zero-day vulnerability exploited by spyware.
Malware & Threats
Microsoft’s struggles with zero-day exploits rolled into a new month with a fresh Patch Tuesday warning about malware attacks in the wild.
Vulnerabilities
Google has released a Chrome 116 security update to patch CVE-2023-4863, the fourth Chrome zero-day vulnerability documented in 2023.
Malware & Threats
Cisco is warning of a zero-day vulnerability in Cisco ASA and FTD that can be exploited remotely, without authentication, in brute force attacks.
Mobile & Wireless
Android’s September 2023 security update resolves a high-severity elevation of privilege vulnerability exploited in malicious attacks.
Cybercrime
A financially motivated cybercrime group has exploited a WinRAR zero-day to deliver malware to traders and steal their money.
Vulnerabilities
While initially it was unclear if the Ivanti Sentry vulnerability CVE-2023-38035 has been exploited, the vendor and CISA have now confirmed it.
Vulnerabilities
CISA has added CVE-2023-38180, a zero-day vulnerability affecting .NET and Visual Studio, to its Known Exploited Vulnerabilities Catalog.
Malware & Threats
The recently patched Ivanti EPMM zero-day CVE-2023-35078 has been exploited to hack the Norwegian government since at least April 2023.
Endpoint Security
GPUs from AMD, Apple, Arm, Intel, Nvidia and Qualcomm are vulnerable to a new type of side-channel attack named GPU.zip.
Funding/M&A
Malware & Threats
The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently...
Cloud Security
Vulnerabilities
Application Security
