#zerodayexploit — Public Fediverse posts

l+f: #Claude serviert Zero-Day-Exploits frei Haus | Security https://www.heise.de/news/l-f-Claude-serviert-Zero-Day-Exploits-frei-Haus-11242325.html #ArtificialIntelligence #AI #AnthropicClaude #ZeroDayExploit #0day #exploit

l+f: #Claude serviert Zero-Day-Exploits frei Haus | Security https://www.heise.de/news/l-f-Claude-serviert-Zero-Day-Exploits-frei-Haus-11242325.html #ArtificialIntelligence #AI #AnthropicClaude #ZeroDayExploit #0day #exploit

Ecco la fantomatica #sicurezza che tanto decanta #google il #playintegrty salverà milioni di dispositivi che non ricevono più #ota da parte dei produttori? Chi avrebbe le capacità di salvare questi dispositivi? La community con progetti come #lineageos #grapheneos ma invece viene ostacolata impedendo alle persone di usare app critiche e fondamentali per la vita quotidiana. #android #noplayintegrty #zerodayexploit #zeroday
https://www.ilsoftware.it/allarme-android-individuate-due-gravi-vulnerabilita/

A tiny flaw in VMware has granted state-sponsored hackers root access worldwide—how did an overlooked vulnerability turn into a global security nightmare?

https://thedefendopsdiaries.com/cve-2025-41244-how-a-single-overlooked-flaw-opened-the-door-to-global-cyber-espionage/

#cve202541244
#vmwarevulnerability
#cyberespionage
#zerodayexploit
#unc5174

A simple PDF on WhatsApp turned out to be a backdoor for spyware—Paragon’s Graphite exploited a zero-day flaw to target journalists and activists worldwide. How safe is your digital privacy?

https://thedefendopsdiaries.com/unveiling-the-threat-how-paragons-graphite-spyware-exploited-whatsapp-vulnerabilities/

#whatsappsecurity
#spyware
#zerodayexploit
#digitalprivacy
#cybersecuritythreats

📬 WinRAR-Zero-Day für Phishing-Angriffe ausgenutzt
#ITSicherheit #Malware #CVE20258088 #PhishingAngriffe2025 #RomComMalware #WinRAR #WinRARUpdate #ZeroDayExploit https://sc.tarnkappe.info/bb8351

📬 WinRAR-Zero-Day für Phishing-Angriffe ausgenutzt
#ITSicherheit #Malware #CVE20258088 #PhishingAngriffe2025 #RomComMalware #WinRAR #WinRARUpdate #ZeroDayExploit https://sc.tarnkappe.info/bb8351

Afgelopen vrijdag werd een zogenaamde #ZeroDayExploit ontdekt in #Microsoft #SharePoint. De kwetsbaarheid stelt hackers in staat om volledige controle te krijgen over de getroffen servers van SharePoint, inclusief software die daarmee verbonden is, zoals #Teams en #OneDrive.

https://vrtnws.be/p.xZRWMdn8R

Afgelopen vrijdag werd een zogenaamde #ZeroDayExploit ontdekt in #Microsoft #SharePoint. De kwetsbaarheid stelt hackers in staat om volledige controle te krijgen over de getroffen servers van SharePoint, inclusief software die daarmee verbonden is, zoals #Teams en #OneDrive.

https://vrtnws.be/p.xZRWMdn8R

🚨 Breaking Cyber News! Researchers uncover NoviSpy, a sinister Android spyware targeting Serbian activists, exploiting a zero-day Qualcomm chip vulnerability. Journalists beware - your device might be compromised! 🕵️‍♀️📱 #CyberSecurity #DigitalPrivacy #ZeroDayExploit @GoogleTAG #newz

https://cyberinsider.com/new-novispy-android-spyware-exploits-zero-day-flaw-in-qualcomm-chips/

🚨 Breaking Cyber News! Researchers uncover NoviSpy, a sinister Android spyware targeting Serbian activists, exploiting a zero-day Qualcomm chip vulnerability. Journalists beware - your device might be compromised! 🕵️‍♀️📱 #CyberSecurity #DigitalPrivacy #ZeroDayExploit @GoogleTAG #newz

https://cyberinsider.com/new-novispy-android-spyware-exploits-zero-day-flaw-in-qualcomm-chips/

#CyberSecurity #Qualcomm #Android #ZeroDayExploit #Hacking: "The zero-day vulnerability, officially designated CVE-2024-43047, “may be under limited, targeted exploitation,” according to Qualcomm, citing unspecified “indications” from Google’s Threat Analysis Group, the company’s research unit that investigates government hacking threats. Amnesty International’s Security Lab, which works to protect civil society from digital surveillance and spyware threats, confirmed Google’s assessment, Qualcomm said.

U.S. cybersecurity agency CISA included the Qualcomm flaw in its list of vulnerabilities that are known to be, or have been, exploited.

At this point, there aren’t many details about who was exploiting this vulnerability “in the wild” — meaning that whoever was using the zero-day was targeting individuals in real hacking campaigns. It also is not yet known which individuals were targeted, or why.

Qualcomm’s spokesperson Catherine Baker told TechCrunch that the company commends “the researchers from Google Project Zero and Amnesty International Security Lab for using coordinated disclosure practices,” allowing the company to roll out fixes for the vulnerability."

https://techcrunch.com/2024/10/09/hackers-were-targeting-android-users-with-qualcomm-zero-day/

#CyberSecurity #Qualcomm #Android #ZeroDayExploit #Hacking: "The zero-day vulnerability, officially designated CVE-2024-43047, “may be under limited, targeted exploitation,” according to Qualcomm, citing unspecified “indications” from Google’s Threat Analysis Group, the company’s research unit that investigates government hacking threats. Amnesty International’s Security Lab, which works to protect civil society from digital surveillance and spyware threats, confirmed Google’s assessment, Qualcomm said.

U.S. cybersecurity agency CISA included the Qualcomm flaw in its list of vulnerabilities that are known to be, or have been, exploited.

At this point, there aren’t many details about who was exploiting this vulnerability “in the wild” — meaning that whoever was using the zero-day was targeting individuals in real hacking campaigns. It also is not yet known which individuals were targeted, or why.

Qualcomm’s spokesperson Catherine Baker told TechCrunch that the company commends “the researchers from Google Project Zero and Amnesty International Security Lab for using coordinated disclosure practices,” allowing the company to roll out fixes for the vulnerability."

https://techcrunch.com/2024/10/09/hackers-were-targeting-android-users-with-qualcomm-zero-day/

Windows MSHTML Zero-Day Vulnerability Exploited In The Wild https://gbhackers.com/windows-mshtml-zero-day-exploit/ #VulnerabilityManagement #CVE/vulnerability #CyberSecurityNews #SecurityPatches #ZerodayExploit #ZeroDay

Windows MSHTML Zero-Day Vulnerability Exploited In The Wild https://gbhackers.com/windows-mshtml-zero-day-exploit/ #VulnerabilityManagement #CVE/vulnerability #CyberSecurityNews #SecurityPatches #ZerodayExploit #ZeroDay

Windows MSHTML Zero-Day Vulnerability Exploited In The Wild https://cybersecuritynews.com/windows-mshtml-zero-day-exploit/ #MSHTMLVulnerability #CyberSecurityNews #cybersecuritynews #VoidBansheeAPT #ZeroDayExploit #CyberSecurity #Vulnerability #ZeroDay

Windows MSHTML Zero-Day Vulnerability Exploited In The Wild https://cybersecuritynews.com/windows-mshtml-zero-day-exploit/ #MSHTMLVulnerability #CyberSecurityNews #cybersecuritynews #VoidBansheeAPT #ZeroDayExploit #CyberSecurity #Vulnerability #ZeroDay

RomCom Group Exploiting Microsoft Office 0-day To Deploy Ransomware https://cybersecuritynews.com/romcom-office-0-day-ransomware/ #CyberSecurityNews #cybersecuritynews #ZeroDayExploit #cybersecurity #CyberAttack #Ransomware #ransomware #ZeroDay

RomCom Group Exploiting Microsoft Office 0-day To Deploy Ransomware https://cybersecuritynews.com/romcom-office-0-day-ransomware/ #CyberSecurityNews #cybersecuritynews #ZeroDayExploit #cybersecurity #CyberAttack #Ransomware #ransomware #ZeroDay

Corona Mirai Botnet Exploiting RCE Zero-Day To Hire New Bots https://cybersecuritynews.com/corona-mirai-rce-zero-day-exploit/ #CyberSecurityNews #cybersecuritynews #ZeroDayExploit #cybersecurity #MiraiBotnet #ZeroDay #Botnet

Corona Mirai Botnet Exploiting RCE Zero-Day To Hire New Bots https://cybersecuritynews.com/corona-mirai-rce-zero-day-exploit/ #CyberSecurityNews #cybersecuritynews #ZeroDayExploit #cybersecurity #MiraiBotnet #ZeroDay #Botnet

Google Patches Actively Exploited Android Kernel Zero-Day Patched https://cybersecuritynews.com/google-android-kernel-zero-day-patch/ #CyberSecurityNews #AndroidSecurity #ZeroDayExploit #cybersecurity #vulnerability #Android #ZeroDay

Google Patches Actively Exploited Android Kernel Zero-Day Patched https://cybersecuritynews.com/google-android-kernel-zero-day-patch/ #CyberSecurityNews #AndroidSecurity #ZeroDayExploit #cybersecurity #vulnerability #Android #ZeroDay

Exploiting a Use-After-Free Vulnerability in the Linux Kernel: A Zero-Day Threat Emerges https://thecyberexpress.com/use-after-free-vulnerability-in-linux-kernel/ #useafterfreevulnerability #LinuxKernelvulnerability #TheCyberExpressNews #useafterfreeflaw #Vulnerabilities #TheCyberExpress #Zerodayexploit #FirewallDaily #DarkWebNews

Exploiting a Use-After-Free Vulnerability in the Linux Kernel: A Zero-Day Threat Emerges https://thecyberexpress.com/use-after-free-vulnerability-in-linux-kernel/ #useafterfreevulnerability #LinuxKernelvulnerability #TheCyberExpressNews #useafterfreeflaw #Vulnerabilities #TheCyberExpress #Zerodayexploit #FirewallDaily #DarkWebNews

📬 TikTok-Konten gehackt: Paris Hilton, CNN und Sony betroffen
#Datenschutz #ITSicherheit #ByteDance #CNN #ParisHilton #Sony #TikTok #ZeroDayExploit https://sc.tarnkappe.info/bf0109

📬 TikTok-Konten gehackt: Paris Hilton, CNN und Sony betroffen
#Datenschutz #ITSicherheit #ByteDance #CNN #ParisHilton #Sony #TikTok #ZeroDayExploit https://sc.tarnkappe.info/bf0109

PoC Exploit Released For D-LINK RCE Zero-Day Vulnerability https://gbhackers.com/d-link-rce-zero-day-exploit-released/ #RemoteCodeExecution(RCE) #CVE/vulnerability #CyberSecurityNews #ZerodayExploit #Exploit

PoC Exploit Released For D-LINK RCE Zero-Day Vulnerability https://gbhackers.com/d-link-rce-zero-day-exploit-released/ #RemoteCodeExecution(RCE) #CVE/vulnerability #CyberSecurityNews #ZerodayExploit #Exploit

Jetzt updaten! Erneut Zeroday-Lücke in Google Chrome, Exploit verfügbar | heise online
https://heise.de/-9716922 #Webbrowser #Browser #Chrome #Zeroday #ZerodayExploit

Jetzt updaten! Erneut Zeroday-Lücke in Google Chrome, Exploit verfügbar | heise online
https://heise.de/-9716922 #Webbrowser #Browser #Chrome #Zeroday #ZerodayExploit

5000+ CrushFTP Servers Hacked Using Zero-Day Exploit https://gbhackers.com/crushftp-servers-zero-day-hack/ #CVE/vulnerability #CyberSecurityNews #ZerodayExploit #cybersecurity #CyberAttack #CrushFTP #ZeroDay

5000+ CrushFTP Servers Hacked Using Zero-Day Exploit https://gbhackers.com/crushftp-servers-zero-day-hack/ #CVE/vulnerability #CyberSecurityNews #ZerodayExploit #cybersecurity #CyberAttack #CrushFTP #ZeroDay

Trust Wallet Urges Caution for Apple Users Amid Reports of Apple iMessage Zero-Day Exploit https://thecyberexpress.com/ios-imessage-vulnerability/ #iOSiMessageVulnerability #iMessagezerodayexploit #iMessagevulnerability #Applevulnerabilities #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #Zerodayexploit #FirewallDaily #darkweb

Trust Wallet Urges Caution for Apple Users Amid Reports of Apple iMessage Zero-Day Exploit https://thecyberexpress.com/ios-imessage-vulnerability/ #iOSiMessageVulnerability #iMessagezerodayexploit #iMessagevulnerability #Applevulnerabilities #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #Zerodayexploit #FirewallDaily #darkweb

The xz backdoor storm isn't over yet and the next storm seems coming up: #LocalPrivilegeEscalation in the #Linux #kernel 5.15 to 6.5 (at least): https://github.com/YuriiCrimson/ExploitGSM

Affects at least #Debian 12 Stable and #Ubuntu 22.04 LTS (including HWE kernels).

(Via https://twitter.com/matteyeux/status/1777974230325354579 and https://www.reddit.com/r/linux/comments/1c0i7tx/someone_found_a_kernel_0day/)

#LPE #Exploit #ZeroDay #ZeroDayExploit #ZDE

The xz backdoor storm isn't over yet and the next storm seems coming up: #LocalPrivilegeEscalation in the #Linux #kernel 5.15 to 6.5 (at least): https://github.com/YuriiCrimson/ExploitGSM

Affects at least #Debian 12 Stable and #Ubuntu 22.04 LTS (including HWE kernels).

(Via https://twitter.com/matteyeux/status/1777974230325354579 and https://www.reddit.com/r/linux/comments/1c0i7tx/someone_found_a_kernel_0day/)

#LPE #Exploit #ZeroDay #ZeroDayExploit #ZDE

📬 Zero-Day-Exploits immer teurer: Unternehmen schützen ihre Produkte besser
#ITSicherheit #Crowdfense #HackerAngriff #Hacking #Schwarzmarkt #SpywareBranche #ZeroDayExploit #Zerodium https://sc.tarnkappe.info/5c6bdb

📬 Zero-Day-Exploits immer teurer: Unternehmen schützen ihre Produkte besser
#ITSicherheit #Crowdfense #HackerAngriff #Hacking #Schwarzmarkt #SpywareBranche #ZeroDayExploit #Zerodium https://sc.tarnkappe.info/5c6bdb

Hackers targeting Google Pixel with a zero-day exploit

Security researchers from GrapheneOS have discovered a zero-day exploit designed to break into Google Pixel smartphones.

#GooglePixel #Google #technews #zerodayexploit

https://techaeris.com/2024/04/04/hackers-targeting-google-pixel-zero-day/

Hackers targeting Google Pixel with a zero-day exploit

Security researchers from GrapheneOS have discovered a zero-day exploit designed to break into Google Pixel smartphones.

#GooglePixel #Google #technews #zerodayexploit

https://techaeris.com/2024/04/04/hackers-targeting-google-pixel-zero-day/

Alarm Over WordPress Zero-Day Vulnerability: Alleged Exploit Endangers 110,000 Websites https://thecyberexpress.com/wordpress-zero-day-exploit-up-for-sale/ #WordPresszerodayexploit #Wordpressvulnerability #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #Websitesecurity #Adfraudplugins #Zerodayexploit #FirewallDaily #darkwebsale #WordPress

Chinese Hackers Exploited New Zero-Day in Barracuda's ESG Appliances

Barracuda has revealed that Chinese threat actors exploited a new zero-day in its Email Security Gateway (ESG) appliances to deploy backdoors on a "limited number" of devices.

Tracked as CVE-2023-7102, the issue relates to a case of arbitrary code execution that resides within a third-party and open-source library named Spreadsheet::ParseExcel that's used by the Amavis scanner within the gateway. Successful exploitation of the new flaw is accomplished by means of a specially crafted Microsoft Excel email attachment.

Spreadsheet::ParseExcel is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.

Barracuda said it released a security update that has been "automatically applied" on December 21, 2023, and that no further customer action is required.

Source: Barracuda Email Security Gateway Appliance (ESG) Advisory

Tags: #CyberSecurity #ZeroDayExploit #BarracudaESG #CVE-2023-7102 #EmailSecurity #Barracuda 🚨

Chinese Hackers Exploited New Zero-Day in Barracuda's ESG Appliances

Barracuda has revealed that Chinese threat actors exploited a new zero-day in its Email Security Gateway (ESG) appliances to deploy backdoors on a "limited number" of devices.

Tracked as CVE-2023-7102, the issue relates to a case of arbitrary code execution that resides within a third-party and open-source library named Spreadsheet::ParseExcel that's used by the Amavis scanner within the gateway. Successful exploitation of the new flaw is accomplished by means of a specially crafted Microsoft Excel email attachment.

Spreadsheet::ParseExcel is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.

Barracuda said it released a security update that has been "automatically applied" on December 21, 2023, and that no further customer action is required.

Source: Barracuda Email Security Gateway Appliance (ESG) Advisory

Tags: #CyberSecurity #ZeroDayExploit #BarracudaESG #CVE-2023-7102 #EmailSecurity #Barracuda 🚨

Last month iPhone users were patching against a zero day vulnerability that could lead to zero-click commercial spyware installation. Now it’s Android’s turn…

#infosec
#android
#ZeroDayExploit
#spyware

https://www.forbes.com/sites/daveywinder/2023/10/04/android-users-warned-of-2-zero-day-exploits-including-spy-on-phone-attack/

Last month iPhone users were patching against a zero day vulnerability that could lead to zero-click commercial spyware installation. Now it’s Android’s turn…

#infosec
#android
#ZeroDayExploit
#spyware

https://www.forbes.com/sites/daveywinder/2023/10/04/android-users-warned-of-2-zero-day-exploits-including-spy-on-phone-attack/

This article at Forbes is now updated with new information from Citizen Lab and Google TAG detailing a zero-day exploit chain leading to a no-click exploit of an iPhone. It’s time to update all the Apple things, well, a whole bunch of them anyway.

#infosec #Apple #ZeroDayExploit #iPhone #iPad #AppleWatch #Mac

https://www.forbes.com/sites/daveywinder/2023/09/23/ios-1701-critical-security-update-warning-for-all-iphone-users/

This article at Forbes is now updated with new information from Citizen Lab and Google TAG detailing a zero-day exploit chain leading to a no-click exploit of an iPhone. It’s time to update all the Apple things, well, a whole bunch of them anyway.

#infosec #Apple #ZeroDayExploit #iPhone #iPad #AppleWatch #Mac

https://www.forbes.com/sites/daveywinder/2023/09/23/ios-1701-critical-security-update-warning-for-all-iphone-users/

Microsoft confirms Word zero-day exploit that could expose passwords to hackers, reports @happygeek in his latest article for TechFinitive - https://www.techfinitive.com/microsoft-confirms-word-zero-day-exploit-that-could-expose-passwords-to-hackers/

#ZeroDayExploit #PatchTuesday #ExploitWednesday #hackers