Hot Topics

Zero-day Exploit

The Golden Gate Bridge, under an blood-red sky

Cisco Zero-Day: As Bad as it Gets — and No Fix 4 Weeks in

| | 0-day, 0-day exploits, 0-day vulnerability, 0day, cisco, Cisco IOS XE, CVE-2023-20198, SB Blogwatch, Zero Day Attacks, zero-day, Zero-Day Bug, Zero-day Exploit, zero-day exploits, zero-day flaw, zero-day flaws, zero-day threat, zero-day vulnerabilities, Zero-day Vulnerability, zero-days, zeroday, zerodayvulnerabilities
Keeping us in suspense—It doesn’t get worse than this: CVE-2023-20198 is CVSS=10 ...
Security Boulevard
Zimperium 4

All eyes on mobile

| | mobile threat, Zero-day Exploit
Of all the data points contained in Zimperium’s recently released 2022 Global Mobile Threat Report, perhaps the most shocking is the spike in known cases of zero-day exploits being used in attacks ...
Be Aware
web application security banner

The Truth About Zero-day Vulnerabilities in Web Application Security

| | Application Security, Zero Day Attack in Cybersecurity, zero day attack protection, Zero-day Exploit, Zero-day Vulnerability
Zero-Day Vulnerabilities are highly valued in legitimate bug bounty programs and have earned bounties of up to USD 2 million. Since no patches or fixes exist, 0-day attacks/exploits are highly. The post ...
Indusface

A Zoom zero-day exploit is up for sale for $500,000

| | Featured Articles, IT Security and Data Protection, vulnerability, Zero-day Exploit, Zoom
Millions of people have moved onto the Zoom video-conferencing platform as the coronavirus pandemic has forced them to work from their homes. According to Zoom’s own statistics, its daily usage has soared ...
The State of Security
hackers

Wi-Fi Chip Firmware Flaws Enable Over-the-Air Hacking

| | firmware vulnerability, Marvell Avastar, micropatch, over-the-air attack, SandboxEscaper, Wi-Fi chip, Windows vulnerability, wireless exploit, Zero-day Exploit
Editor’s Note: This post was updated Jan. 29 to include a statement from Marvell Wi-Fi chips used in several gaming consoles, Chromebooks, streaming boxes, routers and other types of devices have several ...
Security Boulevard
Windows VCF Zero-Day Exploit Allows Remote Code Execution

Windows VCF Zero-Day Exploit Allows Remote Code Execution

| | interbank network, Lazarus Group, Malware, North Korea, PowerRatankba, Redbanc, Remote Code Execution, social engineering, vCard, VCF, Windows vulnerability, Zero-day Exploit
A new unpatched vulnerability in Windows has been disclosed along with proof-of-concept exploit code. It could allow hackers to more easily install malware on computers, but it requires user interaction. The vulnerability ...
Security Boulevard
encryption

New Windows Zero-day Bug Allows Deleting Arbitrary Files

| | arbitrary file write, bug bounty program, open source, SandboxEscaper, Windows vulnerability, Zero-day Exploit
A security researcher released exploit code for an unpatched bug in Windows that could allow an attacker with limited privileges to delete system files. Exploiting the bug requires winning a race condition ...
Security Boulevard
Malware

Researcher Drops Third Windows Zero-Day Exploit in Four Months

| | APT10, cyberespionage, MsiAdvertiseProduct, Privilege Escalation, SandboxEscaper, Windows vulnerability, Zero-day Exploit
A security researcher who uses the online handle SandboxEscaper has published proof-of-concept exploit code for an unpatched vulnerability in Windows. The flaw is located in the “MsiAdvertiseProduct” function, which, according to Microsoft’s ...
Security Boulevard
North Korean APT Group Targets Academia via Malicious Chrome Extensions

North Korean APT Group Targets Academia via Malicious Chrome Extensions

| | APT group, Chrome extension, credential theft, Flash Player, Remote Desktop Protocol, Stolen Pencil, Zero-day Exploit
Security researchers have uncovered an APT group with possible ties to North Korea that has targeted academic institutions since May. The group, dubbed Stolen Pencil by researchers from Netscout, send spear-phishing emails ...
Security Boulevard
Log4Shell Log4j U.S. cyber games fileless malware

Zero-Day Exploit Published for VM Escape Flaw in VirtualBox

| | Apache Struts, critical vulnerability, CVE-2016-1000031, Privilege Escalation, Remote Code Execution, VirtualBox, VM escape, Zero-day Exploit
A security researcher disclosed a yet unpatched zero-day vulnerability in the popular VirtualBox virtualization software that can be exploited from a guest operating system to break out of the virtual machine and ...
Security Boulevard
Load more