Vulnerabilities, vendors and enterprises. The three words often come together, to the horror of all concerned sites. Enterprises often lack sufficient patch management policy and incident response groups, or disregard the importance of proper education on security-related subjects. Thus, the…
The release of Windows 10 May 2020 Update has been pushed to the end of the month, most likely due to a zero-day vulnerability. However, security experts are worried that even when if flaw is patched in a timely manner,…
An unknown hacking group has been found to exploit Apple’s iTunes and iCloud programs in order to deploy ransomware. This is possible by using a zero-day vulnerability which allows the criminals to implant the malicious code without alerting any installed…
CVE-2018-8611 is one the vulnerabilities addressed in December 2018’s Patch Tuesday. The flaw is a kernel zero-day which was just patched but appears to be exploited by several threat actors, Kaspersky Lab researchers report. CVE-2018-8611 Kernel Zero-Day Bug Recently Exploited…
A new zero-day Windows vulnerability has been disclosed via the Twitter social network. According to the information released by the security researcher the problem lies within the Microsoft Data Sharing service. It is used to allow data sharing between applications.…
A security researcher has discovered a jQuery File Upload Plugin Zero-Day Vulnerability that allows hackers to abuse thousands of sites. The flaw was announced to the public alongside the fact that this plugin as adopted by many services and platforms.…
A new Microsoft Windows zero-day vulnerability known as ALPC LPE has been exploited in the wild. The dangerous fact is that the hacking attacks happened soon after the information was published online. Users from all over the world are affected.…
Malicious actors are constantly coming up with new ways of exploiting the various cryptocurrencies available to users. Kaspersky Lab researchers just reported a zero-day flaw discovered in the Telegram Desktop app that could be used as an intermediary for hackers…
Researchers have uncovered a new critical, zero-day vulnerability in Windows, which was identified as CVE-2017-8759. The flaw is flagged as high risk, making the operating system vulnerable to remote code execution. The flaw resides within the .NET Framework. The following…
Researchers are not encouraged to find zero-day flaws in the Tor Browser. A new program is launched by Zerodium, the infamous private exploit reseller, which is promising rewards of up to 1$ million. All a researcher has to do is…
WordPress recently patched three major security vulnerabilities in its latest update. The flaws could allow for cross-site scripting and SQL injections, and a range of other subsequent issues. The fixes affected WordPress versions 4.7.1 and earlier. Applying the update as…
Meet CVE-2016-7855, yet another Adobe Flash Player vulnerability of the zero-day type. Adobe has already released a security bulletin, APSB16-36, addressing the issue in versions of Flash from 23.0.0.185 and earlier affected by the flaw. Linux users should keep in…
Have you heard of Zerodium? It’s a company that has a pretty interesting business – it buys zero-day exploits and then sells them to international government agencies. Apparently, Zerodium really wants to get hold of a series of iOS zero-days…
How Much Would You Pay for a Windows 0-Day? Author: Diana Stoykova An attacker, going by the name BuggiCorp, claims to have found a way to exploit a serious, yet undocumented, vulnerability in every version of Windows from Windows 2000…
A zero-day flaw in Apple’s OS X may sound like something rather impossible. Unfortunately, researchers have indeed discovered a zero-day vulnerability that enables attackers to exploit key protection feature in the believed-to-be invincible operating system. As revealed by SentinelOne researcher…
One question that security engineers are currently facing concerns Microsoft’s Silverlight. As you may have noticed, MS just patched a critical vulnerability in Silverlight in January 12’s Patch Tuesday: MS16-006: Security Update for Silverlight to Address Remote Code Execution, also…
The intensity of malicious attacks that have applied exploit kits (EKs) has increased during the last couple of years. In fact, by having a look at quarter three of 2015, one will notice at once that the exploitation of exploit…
