Zeroday

Attackers exploit an iTunes zeroday to install ransomware

Attackers exploited a zeroday vulnerability in Apple’s iTunes and iCloud programs to infect Windows computers with ransomware without triggering antivirus protections, researchers from Morphisec reported on Thursday. Apple patched the vulnerability earlier this week. The vulnerability resided in the Bonjour component that both iTunes and iCloud for Windows relies on, according to a blog post. […]

Attackers exploit an iTunes zeroday to install ransomware Read More »

Android zero-day gives hackers full control of Pixel, Samsung smartphones

The Android zero-day was supposedly patched two years ago AN ANDROID SECURITY FLAW that was supposedly patched two years ago is being exploited to take control of targets’ smartphones. The vulnerability is being used in exploits developed by NSO Group, a company that specialises in finding and selling security flaws to nation-state APTs, or one of its customers.

Android zero-day gives hackers full control of Pixel, Samsung smartphones Read More »

New zero-day Android exploit targets Pixel, Galaxy phones—and hackers are already using it

Google’s Project Zero team is warning Pixel, Pixel 2, Galaxy S9, Huawei P20, and millions of other Android phone users that a new zero-day vulnerability could let a hacker take full control of your phone. And what’s worse, there is evidence that it is being actively exploited in the wild. As first spotted by Ars

New zero-day Android exploit targets Pixel, Galaxy phones—and hackers are already using it Read More »

Webkit zero-day exploit besieges Mac and iOS users with malvertising redirects

Enlarge / Artist’s impression of a malicious hacker coding up a BlueKeep-based exploit. Attackers have bombarded the Internet with more than 1 billion malicious ads in less than two months. The attackers targeted iOS and macOS users with what were zero-day vulnerabilities in Chrome and Safari browsers that were recently patched, researchers said on Monday.

Webkit zero-day exploit besieges Mac and iOS users with malvertising redirects Read More »

Microsoft issues emergency Windows patch to address Internet Explorer zero-day flaw

Microsoft has issued an emergency out-of-band security update to address two critical vulnerabilities impacting Internet Explorer and Windows Defender. The flaws — indexed as CVE-2019-1367 and CVE-2019-1255 — made it possible for a remote attacker to take control of a target system and trigger a denial of service in Microsoft Defender, the antivirus app that

Microsoft issues emergency Windows patch to address Internet Explorer zero-day flaw Read More »

IE zero-day under active attack gets emergency patch

Enlarge (credit: Michael Theis / Flickr) Microsoft has released two unscheduled security updates, one of which patches a critical Internet Explorer vulnerability that attackers are actively exploiting in the wild. The IE vulnerability, tracked as CVE-2019-1367, is a remote code execution flaw in the way that Microsoft’s scripting engine handles objects in memory in IE.

IE zero-day under active attack gets emergency patch Read More »

Zero-day privilege escalation disclosed for Android

Researchers have disclosed a zero-day vulnerability in the Android operating system that gives a major boost to attackers who already have a toe-hold on an affected device. The privilege-escalation flaw is located in the V4L2 driver, which Android and other Linux-based OSes use to capture real-time video. The vulnerability results from a “lack of validating

Zero-day privilege escalation disclosed for Android Read More »

?
WP Twitter Auto Publish Powered By : XYZScripts.com