Latest Zero-Day news

Google Goes Public with Unpatched Microsoft Edge and IE Vulnerability

Google has gone public with details of a second unpatched vulnerability in Microsoft products, this time in Edge and Internet Explorer, after last week they've published details about a bug in the Windows GDI (Graphics Device Interface) component.
- Catalin Cimpanu
- February 24, 2017
- 07:55 PM
- 2
After Microsoft Delayed Patch Tuesday, Google Discloses Windows Bug

For the second time in three months, Google engineers have disclosed a bug in the Windows OS without Microsoft having released a fix before Google's announcement.
- Catalin Cimpanu
- February 18, 2017
- 11:20 AM
- 2
Microsoft Delays February 2017 Security Updates Due to "Last Minute Issue"

In a short announcement posted on its blog today, Microsoft announced it was delaying today's Patch Tuesday security updates indefinitely until its engineers address a last minute issue the company expected to cause problems for customers, if deployed today.
- Catalin Cimpanu
- February 14, 2017
- 03:10 PM
- 1
SMB Zero-Day Affects Several Windows Versions, Including Windows 10

Proof-of-concept code for a zero-day in the SMB (Server Message Block) protocol that affects several Windows versions has been published online today, sending sysadmins into a frenzy to protect vulnerable machines.
- Catalin Cimpanu
- February 02, 2017
- 05:40 PM
- 8
WordPress Team Fixed a Zero-Day Behind Everyone's Back and Told No One

The WordPress security team revealed yesterday they've secretly fixed a zero-day vulnerability in the WordPress CMS, which wasn't initially included in the official announcement.
- Catalin Cimpanu
- February 02, 2017
- 04:32 AM
- 1
Mobile Security Firm Wants to Buy Expired Zero-Days

Zimperium, the mobile security company that discovered the Stagefright bug in the summer of 2015, announced yesterday its intention to buy fully-working exploits for former Android and iOS zero-days.
- Catalin Cimpanu
- February 01, 2017
- 06:31 AM
- 0
Unpatched Vulnerability Affecting PHP 7 Servers

PHP 7 is affected by an unpatched vulnerability that opens servers running the latest branch of the PHP programming language to attacks.
- Catalin Cimpanu
- December 30, 2016
- 04:30 AM
- 0
It's Been a Bad Week for Linux as Several Security Flaws Surface

Two security researchers published details this week about several security flaws that allow attackers to execute code on affected machines and take over devices. These security flaws affect Linux distros such as Fedora and Ubuntu, and two of these exploits are zero-days, meaning
- Catalin Cimpanu
- December 17, 2016
- 03:35 PM
- 1
Hundreds of Thousands of Unpatchable IP Cameras Affected by Two Zero-Days

Hundreds of thousands of IP cameras from several vendors are affected by two zero-day vulnerabilities that allow an attacker to hijack the device, use it as a pivot point for other attacks, or spy on the camera's owner.
- Catalin Cimpanu
- December 06, 2016
- 07:30 PM
- 1
Mozilla Hurries to Patch Zero-Day Used to Unmask Tor Users

Mozilla engineers are working on a patch to fix a zero-day exploit that's currently being used to deanonymize Tor Browser users.
- Catalin Cimpanu
- November 30, 2016
- 06:08 AM
- 0
Asian and African Banks Hit with New Zero-Day

Financial and government institutions in Asia and Africa have been the victims of targeted cyber-attacks that have leveraged a zero-day in the InPage Word processor in attempts to install keyloggers and backdoor trojans on targeted computers.
- Catalin Cimpanu
- November 25, 2016
- 10:25 AM
- 0
Chrome Users on Fedora Exposed to Drive-By Download Attacks

A combination of poor design choices and insecure software exposes Chrome users on Fedora desktop to drive-by downloads, security researcher Chris Evans has revealed.
- Catalin Cimpanu
- November 18, 2016
- 10:55 AM
- 0
Microsoft's November 2016 Patch Tuesday fixes Zero Day disclosed by Google

Today is the November 2016 Patch Tuesday and we have 14 security updates being released by Microsoft. Of these 14 updates, 6 of them are rated as Critical as they allow remote code execution on the affected computer. Of particular note is the MS16-135 update, which fixes the zero-day Windows vulnerability reported by Google last week
- Lawrence Abrams
- November 08, 2016
- 04:01 PM
- 0
Zero Day GRUB2 Vulnerability Exposed

A new zero-day vulnerability was discovered for the Grub bootloader that allows attackers to bypass Grub password authentication. A security notice released by researchers Hector Marco & Ismael Ripoll states that Grub versions 1.98 (December, 2009) through 2.02 (December, 2015) are affected by this bug.
- Pranav Jituri
- December 18, 2015
- 03:20 PM
- 0