Category: Zero-Day

Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities

android’s-october-2023-security-updates-patch-two-exploited-vulnerabilities

The October 2023 security update for Android patches two vulnerabilities exploited in attacks, both likely linked to spyware vendors.

The post Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities appeared first on SecurityWeek.

Cisco Warns of IOS Software Zero-Day Exploitation Attempts

cisco-warns-of-ios-software-zero-day-exploitation-attempts

Cisco has released patches for vulnerability in the GET VPN feature of IOS and IOS XE software that has been exploited in attacks.

The post Cisco Warns of IOS Software Zero-Day Exploitation Attempts appeared first on SecurityWeek.

Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor

google-rushes-to-patch-new-zero-day-exploited-by-spyware-vendor

Google has rushed to patch a new Chrome zero-day vulnerability, tracked as CVE-2023-5217 and exploited by a spyware vendor.

The post Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor appeared first on SecurityWeek.

Predator Spyware Delivered to iOS, Android Devices via Zero-Days, MitM Attacks

predator-spyware-delivered-to-ios,-android-devices-via-zero-days,-mitm-attacks

Predator spyware delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and MitM attacks.

The post Predator Spyware Delivered to iOS, Android Devices via Zero-Days, MitM Attacks appeared first on SecurityWeek.

Apple Patches 3 Zero-Days Likely Exploited by Spyware Vendor to Hack iPhones

apple-patches-3-zero-days-likely-exploited-by-spyware-vendor-to-hack-iphones

Apple has patched 3 zero-day vulnerabilities that have likely been exploited by a spyware vendor to hack iPhones.

The post Apple Patches 3 Zero-Days Likely Exploited by Spyware Vendor to Hack iPhones appeared first on SecurityWeek.

Trend Micro Patches Exploited Zero-Day Vulnerability in Endpoint Security Products

trend-micro-patches-exploited-zero-day-vulnerability-in-endpoint-security-products

Trend Micro has patched CVE-2023-41179, an Apex One zero-day code execution vulnerability that has been exploited in attacks.

The post Trend Micro Patches Exploited Zero-Day Vulnerability in Endpoint Security Products appeared first on SecurityWeek.

After Apple and Google, Mozilla Also Patches Zero-Day Exploited for Spyware Delivery

after-apple-and-google,-mozilla-also-patches-zero-day-exploited-for-spyware-delivery

After Apple and Google, Mozilla has also patched an image processing-related zero-day vulnerability exploited by spyware.

The post After Apple and Google, Mozilla Also Patches Zero-Day Exploited for Spyware Delivery appeared first on SecurityWeek.

Zero Day Summer: Microsoft Warns of Fresh New Software Exploits

zero-day-summer:-microsoft-warns-of-fresh-new-software-exploits

Microsoft’s struggles with zero-day exploits rolled into a new month with a fresh Patch Tuesday warning about malware attacks in the wild.

The post Zero Day Summer: Microsoft Warns of Fresh New Software Exploits appeared first on SecurityWeek.

Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters

google-patches-chrome-zero-day-reported-by-apple,-spyware-hunters

Google has released a Chrome 116 security update to patch CVE-2023-4863, the fourth Chrome zero-day vulnerability documented in 2023.

The post Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters appeared first on SecurityWeek.

Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks

cisco-asa-zero-day-exploited-in-akira-ransomware-attacks

Cisco is warning of a zero-day vulnerability in Cisco ASA and FTD that can be exploited remotely, without authentication, in brute force attacks.

The post Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks appeared first on SecurityWeek.