Archive for the ‘Zero day’ Category

Exchange Servers targeted via zero-day exploits, have yours been hit?

Microsoft has released out-of-band security updates for seven bugs affecting Microsoft Exchange Servers, four of which are zero-day vulnerabilities being exploited by attackers in the wild to plunder on-premises machines. Source: The zero-day bugs affecting Exchange Servers

Leave a Comment

Security researchers warn of critical zero-day flaws in ‘age gap’ dating app Gaper

Critical zero-day vulnerabilities in Gaper, an ‘age gap’ dating app, could be exploited to compromise any user account and potentially extort users, security researchers claim. The absence of access controls, brute-force protection, and multi-factor authentication in the Gaper app mean attackers could potentially exfiltrate sensitive personal data and use that data to achieve full account takeover within just […]

Leave a Comment

Chrome zero-day browser bug found

Leave a Comment

Google: Proper patching would have prevented 25% of all zero-days found in 2020

Google said today that a quarter of all the zero-day vulnerabilities discovered being exploited in the wild in 2020 could have been avoided if vendors had patched their products correctly. The company, through its Project Zero security team, said it detected 24 zero-days exploited by attackers in 2020. Six of these were variations of vulnerabilities disclosed in […]

Leave a Comment

Google patches two more Chrome zero-days

Google has now patched five Chrome zero-days in three weeks. Source: Google patches two more Chrome zero-days | ZDNet URGENT Google Chrome Zero Day flaw security update Zer0 Days

Leave a Comment

Expert disclosed two Zero-Day flaws in Microsoft browsers

A 20-year-old security researcher publicly disclosed details and proof-of-concept exploits for two zero-day vulnerabilities in Microsoft web browsers. Source: Expert disclosed two Zero-Day flaws in Microsoft browsers Zero Day Vulnerability titles

Leave a Comment

Windows Zero-Day Bug That Lets Attackers Read Any File Gets Micropatch

A micropatch is now available for a zero-day vulnerability in Windows that allows unauthorized read access with the highest privileges to any file on the operating system. Source: Windows Zero-Day Bug That Lets Attackers Read Any File Gets Micropatch

Leave a Comment