Opsec Cyber Zero-day Archives - Page 11 of 15

Category Archives: Zero-day

Firefox 88 patches bugs and kills off a sneaky JavaScript tracking trick

April 20 2021 By Paul Ducklin in Mozilla, Patch, Privacy, Security, Vulnerability, Zero-day

What's in a window name? Turns out that it could be a sneaky tracking code, so Firefox has put a stop to that.

The FBI Is Now Securing Networks Without Their Owners’ Permission

April 14 2021 By Bruce Schneier in China, espionage, FBI, Microsoft, Security, Zero-day

In January, we learned about a Chinese espionage campaign that exploited four zero-days in Microsoft Exchange. One of the characteristics of the campaign, in the later days...

Google’s Project Zero Finds a Nation-State Zero-Day Operation

April 8 2021 By Bruce Schneier in Google, Security, Zero-day

Google’s Project Zero discovered, and caused to be patched, eleven zero-day exploits against Chrome, Safari, Microsoft Windows, and iOS. This seems to have been exploited by...

S3 Ep23: Hafnium happenings, I see you, and Pythonic poison [Podcast]

March 11 2021 By Paul Ducklin in Exploit, Podcast, Privacy, python, Security, Vulnerability, Zero-day

New episode - listen now! (And find out what HAFNIUM really stands for.)

More on the Chinese Zero-Day Microsoft Exchange Hack

March 10 2021 By Bruce Schneier in China, cybersecurity, Microsoft, Security, Zero-day

Nick Weaver has an excellent post on the Microsoft Exchange hack:

The investigative journalist Brian Krebs has produced a handy timeline of events and a few things stand...
Read more

Serious Security: Webshells explained in the aftermath of HAFNIUM attacks

March 9 2021 By Paul Ducklin in Malware, Microsoft, Security, Vulnerability, Zero-day

Webshells explained, with some (safe) examples you can try at home if you want to learn more.

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

March 4 2021 By Daniel Pany in Andrew Thompson, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Microsoft, Security, Threat Research, vulnerabilities, Zero-day

Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation...

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

March 4 2021 By Daniel Pany in Andrew Thompson, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Microsoft, Security, Threat Research, vulnerabilities, Zero-day

Four Microsoft Exchange Zero-Days Exploited by China

March 4 2021 By Bruce Schneier in China, Microsoft, Security, vulnerabilities, Zero-day

Microsoft has issued an emergency Microsoft Exchange patch to fix four zero-day vulnerabilities currently being exploited by China. EDITED TO ADD (3/12): Exchange Online is not affected.