Latest Zero-Day news

Qualcomm says hackers exploit 3 zero-days in its GPU, DSP drivers

Qualcomm is warning of three zero-day vulnerabilities in its GPU and Compute DSP drivers that hackers are actively exploiting in attacks.
- Bill Toulas
- October 03, 2023
- 11:29 AM
- 0
Microsoft Edge, Teams get fixes for zero-days in open-source libraries

Microsoft released emergency security updates for Edge, Teams, and Skype to patch two zero-day vulnerabilities in open-source libraries used by the three products.
- Sergiu Gatlan
- October 03, 2023
- 10:54 AM
- 0
Millions of Exim mail servers exposed to zero-day RCE attacks

A critical zero-day vulnerability in all versions of Exim mail transfer agent (MTA) software can let unauthenticated attackers gain remote code execution (RCE) on Internet-exposed servers.
- Sergiu Gatlan
- September 29, 2023
- 04:11 PM
- 2
Cisco urges admins to fix IOS software zero-day exploited in attacks

Cisco warned customers on Wednesday to patch a zero-day IOS and IOS XE software vulnerability targeted by attackers in the wild.
- Sergiu Gatlan
- September 28, 2023
- 11:34 AM
- 0
Google fixes fifth actively exploited Chrome zero-day of 2023

Google has patched the fifth Chrome zero-day vulnerability exploited in attacks since the start of the year in emergency security updates released today.
- Sergiu Gatlan
- September 27, 2023
- 06:12 PM
- 3
Google assigns new maximum rated CVE to libwebp bug exploited in attacks

Google has assigned a new CVE ID (CVE-2023-5129) to a libwebp security vulnerability exploited as a zero-day in attacks and patched two weeks ago.
- Sergiu Gatlan
- September 26, 2023
- 11:55 AM
- 0
Recently patched Apple, Chrome zero-days exploited in spyware attacks

Security researchers with the Citizen Lab and Google's Threat Analysis Group (TAG) revealed today that three zero-days patched by Apple on Thursday were abused as part of an exploit chain to install Cytrox's Predator spyware.
- Sergiu Gatlan
- September 22, 2023
- 02:16 PM
- 0
Apple emergency updates fix 3 new zero-days exploited in attacks

Apple released emergency security updates to patch three new zero-day vulnerabilities exploited in attacks targeting iPhone and Mac users, for a total of 16 zero-days patched this year.
- Sergiu Gatlan
- September 21, 2023
- 01:57 PM
- 1
Trend Micro fixes endpoint protection zero-day used in attacks

Trend Micro fixed a remote code execution zero-day vulnerability in the Trend Micro's Apex One endpoint protection solution that was actively exploited in attacks.
- Bill Toulas
- September 19, 2023
- 05:11 PM
- 0
Mozilla patches Firefox, Thunderbird against zero-day exploited in attacks

Mozilla released emergency security updates today to fix a critical zero-day vulnerability exploited in the wild, impacting its Firefox web browser and Thunderbird email client.
- Sergiu Gatlan
- September 12, 2023
- 05:32 PM
- 0
Microsoft September 2023 Patch Tuesday fixes 2 zero-days, 59 flaws

Today is Microsoft's September 2023 Patch Tuesday, with security updates for 59 flaws, including two actively exploited zero-day vulnerabilities.
- Lawrence Abrams
- September 12, 2023
- 02:11 PM
- 0
Adobe warns of critical Acrobat and Reader zero-day exploited in attacks

Adobe has released security updates to patch a zero-day vulnerability in Acrobat and Reader tagged as exploited in attacks.
- Sergiu Gatlan
- September 12, 2023
- 01:42 PM
- 0
Apple backports BLASTPASS zero-day fix to older iPhones

Apple released security updates for older iPhones to fix a zero-day vulnerability tracked as CVE-2023-41064 that was actively exploited to infect iOS devices with NSO's Pegasus spyware.
- Bill Toulas
- September 12, 2023
- 09:42 AM
- 0
Google fixes another Chrome zero-day bug exploited in attacks

Google released emergency security updates to fix the fourth Chrome zero-day vulnerability exploited in attacks since the start of the year.
- Sergiu Gatlan
- September 11, 2023
- 03:46 PM
- 0
Notepad++ 8.5.7 released with fixes for four security vulnerabilities

Notepad++ version 8.5.7 has been released with fixes for multiple buffer overflow zero-days, with one marked as potentially leading to code execution by tricking users into opening specially crafted files.
- Bill Toulas
- September 08, 2023
- 03:46 PM
- 0
Cisco warns of VPN zero-day exploited by ransomware gangs

Cisco is warning of a CVE-2023-20269 zero-day vulnerability in its Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) that is actively exploited by ransomware operations to gain initial access to corporate networks.
- Bill Toulas
- September 08, 2023
- 09:32 AM
- 0
Apple discloses 2 new zero-days exploited to attack iPhones, Macs

Apple released emergency security updates to fix two new zero-day vulnerabilities exploited in attacks targeting iPhone and Mac users, for a total of 13 exploited zero-days patched since the start of the year.
- Sergiu Gatlan
- September 07, 2023
- 01:58 PM
- 0
Google: State hackers attack security researchers with new zero-day

Google's Threat Analysis Group (TAG) says North Korean state hackers are again targeting security researchers in attacks using at least one zero-day in an undisclosed popular software.
- Sergiu Gatlan
- September 07, 2023
- 12:48 PM
- 0
September Android updates fix zero-day exploited in attacks

The September 2023 Android security updates tackle 33 vulnerabilities, including a zero-day bug currently targeted in the wild.
- Sergiu Gatlan
- September 06, 2023
- 12:20 PM
- 1
Atlas VPN zero-day vulnerability leaks users' real IP address

An Atlas VPN zero-day vulnerability affecting the Linux client leaks a user's real IP address simply by visiting a website.
- Bill Toulas
- September 05, 2023
- 04:03 PM
- 0