zero-day exploits – Page 2 – Experimental News Clipping Site

Slashdot: Government Hackers Are Leading the Use of Attributed Zero-Days, Google Says

Apr 29, 2025

—

by

Source URL: https://tech.slashdot.org/story/25/04/29/1525220/government-hackers-are-leading-the-use-of-attributed-zero-days-google-says?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Government Hackers Are Leading the Use of Attributed Zero-Days, Google Says Feedly Summary: AI Summary and Description: Yes Summary: Government-sponsored hackers were responsible for a significant portion of zero-day exploits in cyberattacks, as revealed in Google’s recent research. Despite a decrease in overall zero-day exploits from 2023 to 2024,…

Cisco Talos Blog: Lessons from Ted Lasso for cybersecurity success

Apr 24, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/lessons-from-ted-lasso-for-cybersecurity-success/ Source: Cisco Talos Blog Title: Lessons from Ted Lasso for cybersecurity success Feedly Summary: In this edition, Bill explores how intellectual curiosity drives success in cybersecurity, shares insights on the IAB ToyMaker’s tactics, and covers the top security headlines you need to know. AI Summary and Description: Yes Summary: The text outlines…

Cloud Blog: Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457)

Apr 3, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability/ Source: Cloud Blog Title: Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457) Feedly Summary: Written by: John Wolfram, Michael Edie, Jacob Thompson, Matt Lin, Josh Murchie On Thursday, April 3, 2025, Ivanti disclosed a critical security vulnerability, CVE-2025-22457, impacting Ivanti Connect Secure (“ICS”) VPN appliances version 22.7R2.5 and…

Hacker News: There are perhaps 10k reasons to doubt Oracle Cloud’s security breach denial

Mar 25, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/03/25/oracle_breach_update/ Source: Hacker News Title: There are perhaps 10k reasons to doubt Oracle Cloud’s security breach denial Feedly Summary: Comments AI Summary and Description: Yes Summary: The text describes a dispute regarding Oracle Cloud’s denial of a security breach after an infosec researcher claims that sensitive data, including customer security keys and credentials,…

Cloud Blog: Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers

Mar 12, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routers/ Source: Cloud Blog Title: Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers Feedly Summary: Written by: Lukasz Lamparski, Punsaen Boonyakarn, Shawn Chew, Frank Tse, Jakub Jozwiak, Mathew Potaczek, Logeswaran Nadarajan, Nick Harbour, Mustafa Nasser Introduction In mid 2024, Mandiant discovered threat actors deployed custom backdoors on Juniper Networks’ Junos…

The Register: China’s Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets

Mar 5, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/03/05/china_silk_typhoon_update/ Source: The Register Title: China’s Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets Feedly Summary: They’re good at zero-day exploits, too Silk Typhoon, the Chinese government crew believed to be behind the December US Treasury intrusions, has been abusing stolen API keys and cloud credentials in ongoing…

Hacker News: An inside look at NSA tactics, techniques and procedures from China’s lens

Feb 19, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.inversecos.com/2025/02/an-inside-look-at-nsa-equation-group.html Source: Hacker News Title: An inside look at NSA tactics, techniques and procedures from China’s lens Feedly Summary: Comments AI Summary and Description: Yes Summary: This text provides an in-depth exploration of allegations regarding NSA’s cyber operations as reported by Chinese cybersecurity entities, focusing on their tactics, techniques, and procedures (TTPs). It…

Hacker News: Google Fixes Android Kernel Zero-Day Exploited in Attacks

Feb 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://thedefendopsdiaries.com/google-fixes-android-kernel-zero-day-exploited-in-attacks/ Source: Hacker News Title: Google Fixes Android Kernel Zero-Day Exploited in Attacks Feedly Summary: Comments AI Summary and Description: Yes Summary: CVE-2024-53104 has emerged as a significant zero-day vulnerability within the Linux kernel, particularly impacting the USB Video Class driver, and presents severe risks to Android devices. The exploration of this flaw…

The Register: FortiGate config leaks: Victims’ email addresses published online

Jan 23, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/01/23/fortigate_config_leaks_infoseccers_list_victim_emails/ Source: The Register Title: FortiGate config leaks: Victims’ email addresses published online Feedly Summary: Experts warn not to take leaks lightly as years-long compromises could remain undetected Thousands of email addresses included in the Belsen Group’s dump of FortiGate configs last week are now available online, revealing which organizations may have been…

Hacker News: Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025

Jan 23, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.bleepingcomputer.com/news/security/hackers-exploit-16-zero-days-on-first-day-of-pwn2own-automotive-2025/ Source: Hacker News Title: Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025 Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed report on the outcomes of the Pwn2Own Automotive 2025 hacking competition, highlighting the successful exploitation of zero-day vulnerabilities relating to electric vehicle chargers…

Tag: zero-day exploits