Category: Zero-Day

Traders Targeted by Cybercriminals in Attack Exploiting WinRAR Zero-Day

traders-targeted-by-cybercriminals-in-attack-exploiting-winrar-zero-day

A financially motivated cybercrime group has exploited a WinRAR zero-day to deliver malware to traders and steal their money.

The post Traders Targeted by Cybercriminals in Attack Exploiting WinRAR Zero-Day appeared first on SecurityWeek.

Exploitation of Ivanti Sentry Zero-Day Confirmed

exploitation-of-ivanti-sentry-zero-day-confirmed

While initially it was unclear if the Ivanti Sentry vulnerability CVE-2023-38035 has been exploited, the vendor and CISA have now confirmed it.

The post Exploitation of Ivanti Sentry Zero-Day Confirmed appeared first on SecurityWeek.

CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio

cisa-warns-organizations-of-exploited-vulnerability-affecting.net,-visual-studio

CISA has added CVE-2023-38180, a zero-day vulnerability affecting .NET and Visual Studio, to its Known Exploited Vulnerabilities Catalog.

The post CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio appeared first on SecurityWeek.

Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack

ivanti-zero-day-exploited-by-apt-since-at-least-april-in-norwegian-government-attack

The recently patched Ivanti EPMM zero-day CVE-2023-35078 has been exploited to hack the Norwegian government since at least April 2023.

The post Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack appeared first on SecurityWeek.

Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks

second-ivanti-epmm-zero-day-vulnerability-exploited-in-targeted-attacks

Ivanti EPMM customers have been warned of CVE-2023-35081, a second zero-day vulnerability that has been exploited in targeted attacks.

The post Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks appeared first on SecurityWeek.

Zimbra Patches Exploited Zero-Day Vulnerability

zimbra-patches-exploited-zero-day-vulnerability

Zimbra has released patches for a cross-site scripting (XSS) vulnerability that has been exploited in malicious attacks.

The post Zimbra Patches Exploited Zero-Day Vulnerability appeared first on SecurityWeek.

Ivanti Zero-Day Vulnerability Exploited in Attack on Norwegian Government

ivanti-zero-day-vulnerability-exploited-in-attack-on-norwegian-government

An Ivanti EPMM product zero-day vulnerability tracked as CVE-2023-35078 has been exploited in an attack aimed at the Norwegian government.

The post Ivanti Zero-Day Vulnerability Exploited in Attack on Norwegian Government appeared first on SecurityWeek.

Apple Patches Another Kernel Flaw Exploited in ‘Operation Triangulation’ Attacks

apple-patches-another-kernel-flaw-exploited-in-‘operation-triangulation’-attacks

Apple patches another zero-day flaw used in the ‘Operation Triangulation’ exploit chain. iOS and macOS-powered devices are affected.

The post Apple Patches Another Kernel Flaw Exploited in ‘Operation Triangulation’ Attacks appeared first on SecurityWeek.

Citrix Zero-Day Exploited Against Critical Infrastructure Organization

citrix-zero-day-exploited-against-critical-infrastructure-organization

CISA says the new Citrix zero day vulnerability tracked as CVE-2023-3519 has been exploited against a critical infrastructure organization.

The post Citrix Zero-Day Exploited Against Critical Infrastructure Organization appeared first on SecurityWeek.

Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned

exploitation-of-new-citrix-zero-day-likely-to-increase,-organizations-warned

Citrix has patched several vulnerabilities, including CVE-2023-3519, a critical remote code execution zero-day that has been exploited in attacks.

The post Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned appeared first on SecurityWeek.