Zero-Day Vulnerability

Google Chrome application icon on mobile phone screen showing spyware vendor linked to zero-day exploitation framework

“Commercial Spyware” Vendor Linked to Exploitation Framework Using Zero-Days in Chrome, Firefox and Windows

December 7, 2022

A spyware vendor in Spain has been linked to a zero-day exploitation framework that impacted Windows, as well as the Chrome and Firefox browsers, from 2018 to 2021. Google researchers present markers found in its code including a script that is signed by the company.

Hexagon network covering the world map with glowing shields showing nation-state attacks and password attacks

Cyber Security News

Microsoft Detects an Increase in Nation-State Attacks and Password Attacks

November 16, 2022

Nation-state attacks on critical infrastructure and cyberespionage, and password attacks from ordinary cybercriminals increased tremendously within a year, according to Microsoft report.

Cyber Security News

New Microsoft Exchange Zero-Day Vulnerabilities Exploited by State-Sponsored Hackers

October 6, 2022

Microsoft Exchange zero-day vulnerabilities affect an estimated 250,000 on-premise servers. The company is aware of attacks involving a single state-sponsored group that compromised less than ten organizations.

Mechanical bug on laptop keyboard showing zero-day vulnerability for remote code execution

Cyber Security News

Atlassian Zero-Day Vulnerability Allowing Critical Remote Code Execution Patched After Several Exploitation Incidents

June 9, 2022

The patch comes as attempts to exploit the zero-day vulnerability began to ramp up worldwide, and was badly needed as there were no other viable remediation techniques to stop remote code execution.

Security lock with a hole on computer circuit board showing zero-day vulnerabilities

Cyber Security News

Record High Number of Zero-Day Vulnerabilities, Numbers May Be Owed to Improved Detection Says Mandiant and Google

April 25, 2022

New studies from FireEye Mandiant Threat Intelligence and Google’s Project Zero found that 2021 was a record year for zero-day vulnerabilities, more than doubling the amount seen in 2020.

Technology network circle over the globe showing zero-day vulnerability under attack

Cyber Security News

Mass Scanning Activity for Apache’s Log4j Zero-Day Vulnerability Detected in the Wild

December 15, 2021

Many organizations affected by Log4j’s zero-day vulnerability with mass internet scanning detected, suggesting the remote code execution flaw was actively targeted in the wild.

Zero-Day Vulnerability

“Commercial Spyware” Vendor Linked to Exploitation Framework Using Zero-Days in Chrome, Firefox and Windows

Microsoft Detects an Increase in Nation-State Attacks and Password Attacks

New Microsoft Exchange Zero-Day Vulnerabilities Exploited by State-Sponsored Hackers

Atlassian Zero-Day Vulnerability Allowing Critical Remote Code Execution Patched After Several Exploitation Incidents

Record High Number of Zero-Day Vulnerabilities, Numbers May Be Owed to Improved Detection Says Mandiant and Google

Mass Scanning Activity for Apache’s Log4j Zero-Day Vulnerability Detected in the Wild

Ferrari Disclosed a Data Breach Impacting Customer Data but Refused to Pay Ransom

The Anatomy of a Comprehensive Penetration Test

Partial Twitter Source Code Leak on GitHub Uploaded Shortly After First Round of Layoffs

Good Enough Isn’t Good Enough for World Backup Day 2023