Opsec Cyber Zero-day Archives - Page 11 of 15

Category Archives: Zero-day

More on the Chinese Zero-Day Microsoft Exchange Hack

March 10 2021 By Bruce Schneier in China, cybersecurity, Microsoft, Security, Zero-day

Nick Weaver has an excellent post on the Microsoft Exchange hack:

The investigative journalist Brian Krebs has produced a handy timeline of events and a few things stand...
Read more

Serious Security: Webshells explained in the aftermath of HAFNIUM attacks

March 9 2021 By Paul Ducklin in Malware, Microsoft, Security, Vulnerability, Zero-day

Webshells explained, with some (safe) examples you can try at home if you want to learn more.

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

March 4 2021 By Daniel Pany in Andrew Thompson, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Microsoft, Security, Threat Research, vulnerabilities, Zero-day

Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation...

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

March 4 2021 By Daniel Pany in Andrew Thompson, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Microsoft, Security, Threat Research, vulnerabilities, Zero-day

Four Microsoft Exchange Zero-Days Exploited by China

March 4 2021 By Bruce Schneier in China, Microsoft, Security, vulnerabilities, Zero-day

Microsoft has issued an emergency Microsoft Exchange patch to fix four zero-day vulnerabilities currently being exploited by China. EDITED TO ADD (3/12): Exchange Online is not affected.

Another Chrome zero-day exploit – so get that update done!

March 4 2021 By Paul Ducklin in 0-day, Exploit, Google, Patch, Security, Vulnerability, Zero-day

It's déjà vu all over again! New month, new Chrome zero-day bug being exploited in the wild.

Microsoft: Chinese Cyberspies Used 4 Exchange Server Flaws to Plunder Emails

March 2 2021 By BrianKrebs in Latest Warnings, Security, The Coming Storm, Time to Patch, Zero-day

Microsoft Corp. today released software updates to plug four critical security holes that attackers have been using to plunder email communications at companies that use its Exchange Server products....

On Vulnerability-Adjacent Vulnerabilities

February 15 2021 By Bruce Schneier in Exploits, Security, Zero-day

At the virtual Enigma Conference, Google’s Project Zero’s Maggie Stone gave a talk about zero-day exploits in the wild. In it, she talked about how often vendors...

SonicWall Zero-Day

February 8 2021 By Bruce Schneier in cybersecurity, Security, Zero-day

Hackers are exploiting a zero-day in SonicWall:

In an email, an NCC Group spokeswoman wrote: “Our team has observed signs of an attempted exploitation of a vulnerabilitythat affects the...
Read more