#zero-day-exploits
#zero-day-exploits
[ follow ]
Soccer (FIFA)
fromFast Company
5 days agoMythos AI may be a cybersecurity threat, but it follows the rules of the game
Claude Mythos Preview demonstrated unprecedented vulnerability discovery capabilities, finding thousands of zero-day exploits, but represents an acceleration of existing threats rather than a fundamentally new cybersecurity risk.
#patch-tuesday
Information security
fromComputerworld
1 month agoFor March, Patch Tuesday delivers fixes for 83 vulnerabilities
Microsoft's March Patch Tuesday addresses 83 vulnerabilities including two zero-day exploits in SQL Server and .NET, while introducing Common Log File System hardening with signature verification.
Information security
fromComputerworld
1 month agoFor March, Patch Tuesday delivers fixes for 83 vulnerabilities
Microsoft's March Patch Tuesday addresses 83 vulnerabilities including two zero-day exploits in SQL Server and .NET, while introducing Common Log File System hardening with signature verification.
#ios-security-vulnerabilities
Information security
fromDataBreaches.Net
2 months agoCoruna: The Mysterious Journey of a Powerful iOS Exploit Kit - DataBreaches.Net
The Coruna exploit kit targeting iOS 13.0-17.2.1 contains 23 exploits across five chains, proliferating among surveillance vendors, Russian espionage groups, and Chinese financially motivated actors throughout 2025.
Information security
fromThe Hacker News
2 months agoCoruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13-17.2.1
Google identified Coruna, a powerful iOS exploit kit with 23 exploits targeting iOS 13.0-17.2.1, circulating among commercial, government, and financially motivated threat actors since February 2025.
Information security
fromNextgov.com
2 months agoPotential US-built hacking tools obtained by foreign spies and cybercriminals, research says
A sophisticated iPhone hacking toolkit called Coruna, likely originating from U.S. government development, has proliferated to foreign intelligence agencies and criminal groups, compromising iOS devices through multiple exploit chains.
fromThe Hacker News
2 months agoThreatsDay Bulletin: Kali Linux + Claude, Chrome Crash Traps, WinRAR Flaws, LockBit & 15+ Stories
The average e-crime breakout time - the period between initial access and lateral movement onto another system - dropped to 29 minutes, a 65% increase in speed from 2024. One such intrusion undertaken by Luna Moth targeting a law firm moved from initial access to data exfiltration in four minutes.
Information security
fromTechCrunch
2 months agoInside the story of the US defense contractor who leaked hacking tools to Russia | TechCrunch
Peter Williams, a former executive at U.S. defense contractor L3Harris, was sentenced on Tuesday to 87 months in prison for leaking his former company's trade secrets in exchange for $1.3 million in crypto between 2022 and 2025. Williams sold the exploits to Operation Zero, which the U.S. government calls 'one of the world's most nefarious exploit brokers.'
Information security
fromTheregister
2 months agoInfosec exec sold eight zero-day exploit kits to Russia: DoJ
That changed last week when the US Department of Justice published a sentencing memorandum [PDF] that frames Williams' conduct as a betrayal of his employer and the US government, and the cause of significant harm to US national security. Williams "made it possible for the Russian Broker to arm its clients with powerful cyber exploits that could be used against any manner of victim, civilian or military around the world," the DoJ said.
Information security
fromTechCrunch
3 months agoInformant told FBI that Jeffrey Epstein had a 'personal hacker' | TechCrunch
A confidential informant told the FBI in 2017 that Jeffrey Epstein had a "personal hacker," according to a document released by the Department of Justice on Friday. The document, which was released as part of the Justice Department's legally required effort to publish documents related to its investigation into the late sex offender, does not identify who the alleged hacker was, but does include several details about them.
Information security
Information security
fromThe Hacker News
4 months agoWeekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More
Critical zero-day vulnerabilities in Apple and Google products and a .NET SOAPwn flaw are actively exploited; install updates and patch affected software immediately.
Information security
fromTechCrunch
4 months agoGoogle and Apple roll out emergency security updates after zero-day attacks | TechCrunch
Apple and Google issued security updates to patch actively exploited zero-day vulnerabilities tied to a likely government-backed hacking campaign targeting specific users.
fromTheregister
5 months agoTwo Android 0-day bugs patched, plus 105 more fixes
The two vulnerabilities are CVE-2025-48633, an information-disclosure flaw in Android's framework component, and CVE-2025-48572, an elevation-of-privilege bug also in the framework component. Both are ranked high severity, and according to Google, both "may be under limited, targeted exploitation." Both of these - plus an additional 105 security holes - all have patches, so it's a good idea to update your Android software ASAP.
Information security
Information security
fromComputerWeekly.com
5 months agoWhat lies in store for the security world in 2026? | Computer Weekly
Budget cuts and reduced cybersecurity staffing have degraded defenses, causing longer dwell times, slower detection, and greater exposure to supply‑chain and zero‑day attacks in 2026.
fromTechCrunch
6 months agoHow an ex-L3 Harris Trenchant boss stole and sold cyber exploits to Russia | TechCrunch
Williams, a 39-year-old Australian citizen who was known inside the company as "Doogie," admitted to prosecutors that he stole and sold eight exploits, or " zero-days," which are security flaws in software that are unknown to its maker and are extremely valuable to hack into a target's devices. Williams said some of those exploits, which he stole from his own company Trenchant, were worth $35 million, but he only received $1.3 million in cryptocurrency from the Russian broker.
Information security
Apple
fromThe Hacker News
1 year agoApple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks
Apple released security updates addressing two actively exploited vulnerabilities in its operating systems.
The updates were prompted by reports from Google TAG and focus on core security flaws in audio processing and RPAC components.
[ Load more ]