Microsoft: Windows CLFS Weakness Could Result in ‘Extensive Deployment and Activation of Ransomware’
Image: nicescene/Adobe Stock A zero-day weakness in the Windows Common Log File System (CLFS) has been discovered by Microsoft. The...
zeroday
Russian Cybercriminals Utilize CVE-2025-26633 through MSC EvilTwin for Distributing SilentPrism and DarkWisp
Those responsible for exploiting a newly-fixed security flaw in Microsoft Windows are now circulating two fresh covert means of access...
Apple Issues Fix for WebKit Zero-Day Vulnerability Exploited in Directed Assaults
On Tuesday, Apple launched a security patch to address a previously unknown flaw that it revealed has been exploited in...
IT Supply Chains Used by Silk Typhoon for Cyber Attacks on Corporate Networks
The cyber attack group with ties to China, previously responsible for exploiting vulnerabilities in Microsoft Exchange servers earlier this year,...
Amnesty Discovers Cellebrite’s 0-Day Exploit Utilized to Access Android Phone of Serbian Activist
Utilizing an innovative zero-day exploit created by Cellebrite, the smartphone of a 23-year-old youth activist from Serbia was specifically targeted...
PostgreSQL Weakness Utilized Alongside BeyondTrust Zero-Day in Focused Offensives
Assailants responsible for leveraging a zero-day weakness in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) solutions in December...
Zyxel CPE Units Encounter Ongoing Exploitation Because of Unfixed CVE-2024-40891 Weakness
Warnings from cybersecurity experts indicate that Zyxel CPE Series gadgets are being actively targeted by a severe undisclosed vulnerability, with...
Cybercriminals Manipulate Newly Discovered Vulnerability in cnPilot Routers to Launch AIRASHI DDoS Botnet
Malicious actors are taking advantage of an undisclosed zero-day flaw in Cambium Networks cnPilot routers to install a version of...
Romantic Comedy Utilizes Zero-Day Vulnerabilities in Firefox and Windows to Carry Out Advanced Cyberassaults
The hacker group associated with Russia dubbed RomCom has been connected to the exploitation of two previously unknown security vulnerabilities....
Russian Cybercriminals Capitalize on Fresh NTLM Bug to Install RAT Malware through Phishing Emails
An updated security vulnerability affecting Windows NT LAN Manager (NTLM) was utilized as a zero-day exploit by an alleged Russian-affiliated...
Google’s Artificial Intelligence Tool Big Sleep Identifies Previously Unknown Weakness in SQLite Database Engine
Nov 04, 2024Ravie LakshmananAI / Vulnerability Google announced the discovery of a zero-day flaw in the SQLite open-source database engine...
Group of Lazarus Utilizes Google Chrome Weakness to Dominate Infected Devices
Attributed to the Lazarus Group, the North Korean threat actor has seized command of infected devices by exploiting a now-patched...
North Korean Faction Leverages Google Chrome Weakness to Govern Affected Devices
An unrecognized organization from North Korea, recognized as Lazarus Group, has exploited a vulnerability in Google Chrome to take command...
The Emergence of Zero-Day Vulnerabilities: How Conventional Security Measures Come Up Short
Lately, there has been a surge in both the quantity and complexity of zero-day vulnerabilities, presenting a grave danger to...
Latest Update from Firefox Addresses Exploited Vulnerability
Mozilla, the organization behind the popular browser Firefox, released a solution on Wednesday to address a zero-day vulnerability that has...
