Lazarus Hackers Exploited Windows 0-Day to Gain Kernel Access
The Lazarus Group, a well-known cybercriminal organization, has recently exploited a zero-day vulnerability in Windows to gain kernel privileges, a ...
Read moreTag: exploited
New Vulnerabilities in ConnectWise ScreenConnect Massively Exploited by Attackers
Two new vulnerabilities impact ConnectWise ScreenConnect, remote desktop and access software used for support: CVE-2024-1709 and CVE-2024-1708, with the former ...
Read more
Roundcube zero-day exploited in attacks on European governments – Week in security with Tony Anscombe
Video The zero-day exploit deployed by the Winter Vivern APT group only requires that the target views a specially crafted ...
Read more
Apple Fixes Actively Exploited Kernel Flaw
Apple has fixed an actively exploited vulnerability in its kernel, impacting certain versions of iOS and macOS. The vulnerability (CVE-2023-38606) ...
Read more
Apple Patches Another Kernel Flaw Exploited in ‘Operation Triangulation’ Attacks
Apple on Monday pushed out major security-themed updates to its flagship iOS, macOS and iPadOS platforms, warning that at least ...
Read more
CISA Warns of Actively Exploited Citrix Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to apply patches after Citrix earlier this week disclosed ...
Read more
Cisco Talos Reports Windows Policy Loophole Exploited by Threat Actor
Image: SomYuZu/Adobe Stock Cisco Talos discovered a new Microsoft Windows policy loophole that allows a threat actor to sign malicious ...
Read moreApple Releases Fix For Actively Exploited WebKit Bug
Apple has released an emergency update fixing an actively exploited security flaw in WebKit that impacts iOS, macOS and iPadOS. ...
Read more
Samsung Phone Flaws Added to CISA ‘Must Patch’ List Likely Exploited by Spyware Vendor
The US Cybersecurity and Infrastructure Security Agency (CISA) has added half a dozen flaws affecting Samsung smartphones to its Known ...
Read more
CISA Tells US Agencies to Patch Exploited Roundcube, VMware Flaws
The US government’s cybersecurity agency CISA on Thursday added another batch of security flaws to its Known Exploited Vulnerabilities (KEV) ...
Read more