Opsec Cyber Zero-day Archives - Page 12 of 15

Category Archives: Zero-day

Microsoft: Chinese Cyberspies Used 4 Exchange Server Flaws to Plunder Emails

March 2 2021 By BrianKrebs in Latest Warnings, Security, The Coming Storm, Time to Patch, Zero-day

Microsoft Corp. today released software updates to plug four critical security holes that attackers have been using to plunder email communications at companies that use its Exchange Server products....

On Vulnerability-Adjacent Vulnerabilities

February 15 2021 By Bruce Schneier in Exploits, Security, Zero-day

At the virtual Enigma Conference, Google’s Project Zero’s Maggie Stone gave a talk about zero-day exploits in the wild. In it, she talked about how often vendors...

SonicWall Zero-Day

February 8 2021 By Bruce Schneier in cybersecurity, Security, Zero-day

Hackers are exploiting a zero-day in SonicWall:

In an email, an NCC Group spokeswoman wrote: “Our team has observed signs of an attempted exploitation of a vulnerabilitythat affects the...
Read more

Chrome zero-day browser bug found – patch now!

February 5 2021 By Paul Ducklin in 0-day, Exploit, Google, Security, Vulnerability, Zero-day

This zero-day bug affects Chrome, as well as Edge and other Chromium-based browsers.

Sophisticated Watering Hole Attack

January 20 2021 By Bruce Schneier in Exploits, Google, Security, Zero-day

Google’s Project Zero has exposed a sophisticated watering-hole attack targeting both Windows and Android:

Some of the exploits were zero-days, meaning they targeted vulnerabilities that at the time were...
Read more

Impressive iPhone Exploit

December 2 2020 By Bruce Schneier in Apple, Exploits, iPhone, Security, vulnerabilities, Zero-day

This is a scarily impressive vulnerability:

Earlier this year, Apple patched one of the most breathtaking iPhone vulnerabilities ever: a memory corruption bug in the iOS kernel that gave...
Read more

S3 Ep5: Chrome, Flash and malware for sale [Podcast]

November 5 2020 By Paul Ducklin in Cybercrime, Exploit, Google, Malware, Security, Zero-day

Here's the latest podcast - listen now!

Another Chrome zero-day, this time on Android – check your version!

November 4 2020 By Paul Ducklin in Android, Exploit, Google, Security, Vulnerability, Zero-day

Another week, another Chrome zero-day, this time on your phone.

New Windows Zero-Day

November 2 2020 By Bruce Schneier in Exploits, Security, Windows, Zero-day

Google’s Project Zero has discovered and published a buffer overflow vulnerability in the Windows Kernel Cryptography Driver. The exploit doesn’t affect the cryptography, but allows attackers to escalate...