Hackers Exploiting Zimbra 0-day to Attack Government Organizations

Hackers Exploiting Zimbra 0-day to Attack Government Organizations

Zimbra Collaboration is an open-source solution software suite with an email server and web client for collaboration.  Over 5,000 companies and public sector users, along with hundreds of millions of end-users in more than 140...
iTunes 0-day Privilege Escalation Flaw Let Attackers Hack Windows

iTunes 0-day Privilege Escalation Flaw Let Attackers Hack Windows

iTunes is a media player which is developed by Apple Inc. and this application enables users to purchase, organize, and play digital music and videos.  It was launched in 2001 and revolutionized the way people...
Microsoft Teams & Edge Zero-Day Vulnerabilities Leads to Arbitrary Code Execution

Microsoft Teams & Edge Zero-Day Vulnerabilities Leads to Code Execution

Microsoft has addressed two zero-day vulnerabilities in two Open-Source Software security vulnerabilities, which include Microsoft Edge, Microsoft Teams for Desktop, Skype for Desktop, and Webp images extension. These vulnerabilities were previously reported and had the...
Pwn2Own Day One

Windows 11, Tesla, macOS & Ubuntu Desktop Hacked – Pwn2Own Day One

On the first day, Pwn2Own Vancouver 2023 hacking challenge participants compromised Windows 11, Tesla, macOS, and Ubuntu Desktop. AbdulAziz Hariri of Haboob SA, who completed his attack against Adobe Reader utilizing a 6-bug logic chain...
13,800+ Internet-Exposed Check Point Gateways Vulnerable To 0-Day Attacks: Poc Released

13,800+ Internet-Exposed Check Point Gateways Vulnerable To 0-Day Attacks: Poc Released

A critical zero-day vulnerability, CVE-2024-24919, has been discovered in Check Point Security Gateways, enabling the IPSec VPN or Mobile Access blades. This vulnerability is actively exploited in the wild, posing a significant threat to...
AtlasVPN Zero-day Vulnerability Leaks the users IP Address

AtlasVPN Zero-day Vulnerability Leaks the users IP Address

A Critical 0-day vulnerability was discovered in AtlasVPN for Linux, which can disconnect the AtlasVPN and leak the user's IP address. The AtlasVPN, running a daemon on Linux, also runs an HTTP server for...
New iPhone 0-days Exploited in-the-wild to Install Predator Spyware

New iPhone 0-days Exploited in-the-wild to Install Predator Spyware

As previously reported, Apple released some emergency patches for three critical vulnerabilities considered Zero-Day and found to be exploited in the wild by threat actors. Adding more details to these vulnerabilities, an exploit chain...
Pwn2Own Day 2

26 Unique 0-Day Bug Exploited In Pwn2Own Hacking Contest – Day 2

Researchers have received $400,000 for 26 distinct 0-day flaws in the Toronto Pwn2Own hacking competition. Followed by Day 1 of the event, Samsung Galaxy was successfully used in two SOHO Smashup demonstrations and was exploited...
Windows Smart App Control Zero-Day

Windows Smart App Control Zero-Day (CVE-2024-38217) Exploited Since 2018 Finally Fixed

Microsoft has addressed a critical zero-day vulnerability affecting its Windows Smart App Control (SAC) and SmartScreen security features. This vulnerability was fixed at Microsoft’s September 2024 Patch Tuesday, which addressed a significant number...
Internet Explorer zero-day Flaw

North Korean Hackers Exploited Internet Explorer Zero-Day Flaw

A joint report by AhnLab Security Emergency response Center (ASEC) and the National Cyber Security Center (NCSC) has revealed a new zero-day vulnerability (CVE-2024-38178) in Microsoft Internet Explorer (IE) being actively exploited by North...

Recent Posts

CyTwist Launches Advanced Security Solution to identify AI-Driven Cyber Threats in...

CyTwist, a leader in advanced next-generation threat detection solutions, has launched its patented detection engine to combat the insidious rise of AI-generated malware. The cybersecurity...