Friday, November 22, 2024
Tag:

zero-day

CrushFTP Servers Zero-day Under Active Attack: Update Now

CrushFTP is a file transfer server that supports secure protocols, offers easier configuration, and offers powerful monitoring tools.It also provides a web interface that...

Chinese Hackers Exploit New Zero-Day in Barracuda’s ESG to Deploy Backdoor

Barracuda Email Security Gateway (ESG) Appliance has been discovered with an Arbitrary code Execution vulnerability exploited by a China Nexus threat actor tracked as...

Hackers Exploit Atlassian Confluence Zero-day Flaw to Create Admin Account

The widely adopted Atlassian Confluence has been discovered with a zero-day vulnerability, which could allow threat actors to create an admin account on the...

CISA Published a Warning About Ivanti EPMM Zero-day Vulnerabilities

The United States Director of the Cybersecurity and Infrastructure Security Agency (CISA) released a warning on Friday about the active exploitation of Ivanti EPMM...

41 Zero-days Exploited In-the-Wild in 2022 – Google Report

In 2022, the detection of zero-day exploits in the wild decreased by 40% compared to the previous year. 41 in-the-wild 0-days were detected, the second-highest...

Re-released Apple WebKit Zero-Day Patch Fixes Website Breaking

Apple has recently released new Rapid Security Response (RSR) patches to fix a zero-day vulnerability. This vulnerability has been exploited in attacks and affects...

Hackers Actively Exploit Unpatched Office Zero-Day Flaw in the Wild

Storm-0978, a threat actor, actively targeted European and North American defense and government entities in a phishing campaign.Exploiting CVE-2023-36884, the campaign used Word documents...

Update Now! Apple Issues an Emergency Patch to Address a Zero-Day Flaw in iOS and macOS

New Rapid Security Response (RSR) patches from Apple have been released to address a new zero-day defect that has been used in attacks and...