Tag

Zero Day Exploit

All articles tagged with #zero day exploit

cybersecurity8 days ago•2 min saved

New Citrix NetScaler SAML Flaw CVE-2026-88779 Exploited in Zero-Day Attacks

Citrix released emergency patches for CVE-2026-88779, a high-severity memory buffer flaw in NetScaler ADC and Gateway appliances using SAML authentication. The vulnerability, which carries a CVSS score of 8.7, is being actively exploited in targeted attacks to cause denial-of-service conditions. While Citrix characterizes the issue as a service availability risk, researchers and administrators report evidence of remote code execution attempts, including malware payloads on patched systems. CISA has added the flaw to its Known Exploited Vulnerabilities catalog, mandating federal agencies to patch by October 7, 2026. This latest incident follows a wave of exploitation of earlier NetScaler vulnerabilities in September 2026, affecting dozens of organizations across government, healthcare, and finance sectors.

via BleepingComputer|

#cisa-advisory #citrix-netscaler #cve-2026-88779

security11 days ago•1 min saved

Proof-of-Concept Reveals How Malicious PDFs Trigger Apple CoreGraphics Crash

Security researchers have released a proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw patched on September 28. The vulnerability, triggered by a malicious PDF with a crafted font, causes a crash on unpatched iOS and macOS devices. While Apple confirmed the flaw was used in targeted attacks, the new analysis demonstrates only a memory corruption crash, not full code execution. CISA mandated federal agencies patch by October 2, and researchers noted potential links to WhatsApp delivery mechanisms, though Meta has not confirmed involvement.

via The Hacker News|

#apple-security #coregraphics #cve-2026-86950

technology14 days ago•102 min saved

Apple Urges Immediate Updates to Patch Actively Exploited Zero-Day in CoreGraphics

Apple released emergency updates for iPhones, iPads, and Macs to patch a critical zero-day vulnerability (CVE-2026-86950) in the CoreGraphics framework. This out-of-bounds write flaw allows arbitrary code execution and is being actively exploited in highly targeted attacks against users of iOS versions prior to iOS 27. While the attacks appear sophisticated and limited to specific individuals, security experts urge all users to update immediately to mitigate risks, as the vulnerability affects devices back to the iPhone 11. CISA has also mandated federal agencies to patch within three days.

via Tom's Guide|

#apple-security #coregraphics #cve-2026-86950

security20 days ago•1 min saved

BigDiskBuster Exploit Freezes Microsoft Defender Updates on All Windows Versions

Security researcher Abdelhamid Naceri, known as Nightmare Eclipse, released a new proof-of-concept exploit called BigDiskBuster that prevents Microsoft Defender from installing platform and signature updates. The tool, published on September 19, 2026, works by filling available disk space to block update downloads on all supported Windows versions. While Defender remains active, its detection capabilities become stale. Microsoft has not issued a patch or CVE for this specific flaw, though it has addressed several other zero-days disclosed by Naceri in recent months. The exploit is part of an ongoing dispute between Naceri and Microsoft over his termination.

via BleepingComputer|

#abdelhamid-naceri #microsoft-defender #nightmare-eclipse

security27 days ago

Google Patches Actively Exploited Pixel Modem Zero-Day in September Update

Google has released security patches for its Pixel devices to address a high-severity vulnerability in the cellular modem that is currently under limited, targeted exploitation. The flaw, identified as CVE-2026-58704, allows attackers to bypass permission checks and escalate privileges without user interaction. This zero-day vulnerability was added to the U.S. government's Known Exploited Vulnerabilities catalog, requiring federal agencies to apply fixes by September 19, 2026. The September update also resolves 109 other security issues across various components.

via The Hacker News|

#cisa-kev #cve-2026-58704 #google-pixel

security1 year ago•5 min saved

Researchers link leak to rise in Microsoft SharePoint attacks and ransomware use

Researchers suggest that a leak of exploit details, possibly from a Pwn2Own competition, allowed attackers including Chinese spies and ransomware groups to exploit vulnerabilities in Microsoft SharePoint before patches could fully prevent the attacks, leading to widespread compromises and ongoing security concerns.

via theregister.com|

#cves #leak #microsoft-sharepoint

technology1 year ago•1 min saved

Multiple Cyberattacks Target U.S. and Global Microsoft SharePoint and Software Systems

The US National Nuclear Security Administration was reportedly breached through a zero-day vulnerability in on-premises Microsoft SharePoint software, exploited by Chinese-affiliated hacking groups. Despite the breach, no sensitive information was leaked, and Microsoft has patched the flaw. The incident highlights ongoing cybersecurity risks associated with SharePoint vulnerabilities.

via The Verge|

#cybersecurity #data-breach #microsoft-sharepoint

technology1 year ago•1 min saved

Microsoft Faces Rising Threats from Chinese Hackers Exploiting SharePoint Vulnerabilities

Microsoft has linked recent SharePoint server attacks to Chinese state-affiliated hacking groups, with vulnerabilities exploited to access sensitive data. Microsoft released patches for affected SharePoint versions, as investigations continue into ongoing threats from these groups, including Linen Typhoon, Violet Typhoon, and Storm-2603.

via The Verge|

#chinese-hacking-groups #cybersecurity #microsoft

technology1 year ago•3 min saved

Global Cyberattack Targets Microsoft Software in Widespread Exploits

Hackers exploited a zero-day vulnerability in Microsoft's SharePoint server software to target various entities globally, including U.S. government agencies and businesses, prompting Microsoft to release an emergency patch and CISA to warn of active exploitation, with ongoing efforts to fix older versions.

via Forbes|

#cybersecurity #government-breach #microsoft

technology1 year ago•1 min saved

Major Security Flaw Sparks Widespread Microsoft SharePoint Cyberattack

Hackers are exploiting a zero-day vulnerability in Microsoft SharePoint servers, putting tens of thousands of on-premises servers at risk of data theft and unauthorized access. Microsoft has issued patches for some versions and is working on others, while authorities advise disconnecting affected servers from the internet until secured.

via The Verge|

#cyberattack #microsoft-sharepoint #patch-release

cybersecurity1 year ago•2 min saved

Thousands of Palo Alto Firewalls Breached in Exploit Campaign

Approximately 2,000 Palo Alto Networks firewalls have been compromised due to two newly discovered vulnerabilities, CVE-2024-0012 and CVE-2024-9474, which allow attackers to gain unauthorized access and root privileges. Despite a decrease in internet-exposed interfaces, the Shadowserver Foundation reports significant exploitation, primarily in the US and India. Palo Alto Networks has released patches and shared indicators of compromise to help mitigate the threat, while emphasizing that most customers follow best practices to secure their systems.

via SecurityWeek|

#cyber-attacks #cybersecurity #firewall-vulnerabilities

technology2 years ago•4 min saved

Trust Wallet Urges Immediate iMessage Disablement Amid iPhone Exploit Concerns

Trust Wallet claimed that hackers may be targeting people with an iMessage "zero-day" exploit, urging iPhone users to turn off iMessage until Apple patches it. However, the "credible intel" is actually an advertisement on a dark web site offering the alleged exploit for $2 million in bitcoin, with no evidence of its existence. Cybersecurity experts suggest using Lockdown Mode instead, as there is no evidence of successful hacks while using it. The dark web site, CodeBreach Lab, appears to be new and lacks credibility, raising suspicions of a scam.

via TechCrunch|

#apple #crypto-wallet #imessage

cybersecurity2 years ago•2 min saved

"North Korean Hackers Exploit Windows Kernel Zero-Day for Months"

Microsoft patched a high-severity Windows Kernel privilege escalation vulnerability in February, six months after being informed that the flaw was being exploited as a zero-day by the North Korean Lazarus state hackers. The vulnerability impacts multiple versions of Windows and allows local attackers to gain SYSTEM privileges without user interaction. Lazarus exploited the flaw to gain kernel-level access, turn off security tools, and deploy a new remote access trojan (RAT) malware. Windows users are advised to install the February 2024 Patch Tuesday updates to block these attacks.

via BleepingComputer|

#cve-2024-21338 #cybersecurity #lazarus

cybersecurity2 years ago•2 min saved

"North Korean Lazarus Group Exploits Windows Kernel Zero-Day for Rootkit Attack"

The Lazarus Group exploited a recently patched Windows Kernel flaw, CVE-2024-21338, as a zero-day to gain kernel-level access and disable security software on compromised hosts. This allowed them to run the FudModule rootkit, which can disable security solutions and manipulate Windows components. The attack showcases the group's technical sophistication and cross-platform focus, as they also target Apple macOS systems. This incident highlights the ongoing threat posed by the Lazarus Group as one of the most prolific and advanced persistent threat actors in the cybersecurity landscape.

via The Hacker News|

#cybersecurity #fudmodule-rootkit #lazarus-group

technology2 years ago•1 min saved

"Microsoft Exchange Server: Patched Critical Bug Under Active Exploitation"

Microsoft has warned about a critical vulnerability in Exchange Server, tracked as CVE-2024-21410, which was exploited as a zero-day before being fixed during this month's Patch Tuesday. The flaw allows remote unauthenticated threat actors to escalate privileges in NTLM relay attacks targeting vulnerable Microsoft Exchange Server versions. Microsoft has released Exchange Server 2019 Cumulative Update 14 (CU14) to address this vulnerability and enable NTLM credentials Relay Protections to mitigate authentication relay and man-in-the-middle attacks. Admins are advised to evaluate their environments and review Microsoft's documentation before toggling EP on their Exchange servers to avoid breaking functionality.

via BleepingComputer|

#exchange-server #microsoft #ntlm-relay-attacks