Governments Used Microsoft Office Zero-Day for Cyber Espionage

Governments Used Microsoft Office Zero-Day for Cyber Espionage

The flaw was already patched by Microsoft on Tuesday

Microsoft Releases Patch for Zero-Day Flaw in Office and WordPad

Microsoft Releases Patch for Zero-Day Flaw in Office and WordPad

Vulnerability details were made public earlier this week

Microsoft Fixes 45 Security Flaws, Some Allowing Hackers to Hijack Your PC

Microsoft Fixes 45 Security Flaws, Some Allowing Hackers to Hijack Your PC

IE, Edge, others getting updates on Patch Tuesday

ShadowBrokers Now Selling Windows Exploits (Including a 0-day) for 750 Bitcoin

ShadowBrokers Now Selling Windows Exploits (Including a 0-day) for 750 Bitcoin

Pack of tools exposing Windows users now sold online

Exploit Code Bypasses Linux Security Features Leaving Systems Vulnerable

Exploit Code Bypasses Linux Security Features Leaving Systems Vulnerable

Security researcher finds way to bypass Linux protection

  • Security
  • By Catalin Cimpanu
  • October 26th, 2016
LDAP Servers Can Amplify DDoS Attacks by 46 to 55 Times

LDAP Servers Can Amplify DDoS Attacks by 46 to 55 Times

New DDoS reflection attack vector discovered

Adobe Patches Flash Zero-Day Discovered by Google and Used in Live Attacks

Adobe Patches Flash Zero-Day Discovered by Google and Used in Live Attacks

Zero-day used against users running Windows 7, 8.1, and 10

Recent Windows Zero-Day Used by FruityArmor APT Takes Over PCs via Font Files

Recent Windows Zero-Day Used by FruityArmor APT Takes Over PCs via Font Files

Kaspersky Lab discovers new FruityArmor APT

  • Security
  • By Catalin Cimpanu
  • October 12th, 2016
AVTECH Shuns Security Firm and Leaves All Products Vulnerable Without a Patch

AVTECH Shuns Security Firm and Leaves All Products Vulnerable Without a Patch

Over 130,000 vulnerable products available online

Microsoft Patches Four Zero-Days Used in Live Attacks

Microsoft Patches Four Zero-Days Used in Live Attacks

0-days affect IE, Edge, Office, and Windows' GDI component

Exploit Vendor Offers $1.5 Million for iOS 10 Zero-Days

Exploit Vendor Offers $1.5 Million for iOS 10 Zero-Days

Prices also raised for Android and Flash exploits

  • Security
  • By Catalin Cimpanu
  • September 25th, 2016
Over 850,000 Devices Affected by Unpatched Cisco Zero-Day

Over 850,000 Devices Affected by Unpatched Cisco Zero-Day

Lots of critical equipment vulnerable to BENINGCERTAIN 0-day

Microsoft Patches IE and Edge Zero-Day Used in Massive Malvertising Campaign

Microsoft Patches IE and Edge Zero-Day Used in Massive Malvertising Campaign

CVE-2016-3351 zero-day was used in the AdGholas campaigns

  • Security
  • By Catalin Cimpanu
  • September 14th, 2016
Google Launches Android Hacking Contest with $200,000 Prize

Google Launches Android Hacking Contest with $200,000 Prize

Contest will take place for a six-month period, includes prizes for remote code execution flaws on Android devices

MySQL Zero-Day Allows Database Takeover

MySQL Zero-Day Allows Database Takeover

Limited proof-of-concept exploitation code published online

Apple Patches OS X and Safari Zero-Days Related to NSO Group Spyware

Apple Patches OS X and Safari Zero-Days Related to NSO Group Spyware

Apple patches two new zero-days in OS X and Safari

Spyware Sold to Governments Behind Recent iOS Zero-Days

Spyware Sold to Governments Behind Recent iOS Zero-Days

Apple fixes three zero-days used by Pegasus spyware

 
Want more? Browse: