Tag: zero-day vulnerability
-
The Register: Another massive security snafu hits Microsoft, but don’t expect it to stick
Source URL: https://www.theregister.com/2025/07/21/massive_security_snafu_microsoft/ Source: The Register Title: Another massive security snafu hits Microsoft, but don’t expect it to stick Feedly Summary: Move along, nothing to see here comment Here we go again. Another major Microsoft attack, with this one seeing someone — most likely government-backed hackers — exploiting a zero-day bug in SharePoint Server that…
-
Cisco Talos Blog: Everyone’s on the cyber target list
Source URL: https://blog.talosintelligence.com/everyones-on-the-cyber-target-list/ Source: Cisco Talos Blog Title: Everyone’s on the cyber target list Feedly Summary: In this week’s newsletter, Martin emphasizes that awareness, basic cyber hygiene and preparation are essential for everyone, and highlights Talos’ discovery of the new PathWiper malware. AI Summary and Description: Yes **Summary:** The text summarizes insights on personal cybersecurity…
-
Cisco Talos Blog: UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware
Source URL: https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/ Source: Cisco Talos Blog Title: UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware Feedly Summary: Talos has observed exploitation of CVE-2025-0994 in the wild by UAT-6382, a Chinese-speaking threat actor, who then deployed malware payloads via TetraLoader. AI Summary and Description: Yes **Summary:** The text describes the exploitation of a significant remote-code-execution…
-
Microsoft Security Blog: Marbled Dust leverages zero-day in Output Messenger for regional espionage
Source URL: https://www.microsoft.com/en-us/security/blog/2025/05/12/marbled-dust-leverages-zero-day-in-output-messenger-for-regional-espionage/ Source: Microsoft Security Blog Title: Marbled Dust leverages zero-day in Output Messenger for regional espionage Feedly Summary: Since April 2024, the threat actor that Microsoft Threat Intelligence tracks as Marbled Dust has been observed exploiting user accounts that have not applied fixes to a zero-day vulnerability (CVE-2025-27920) in the messaging app Output…
-
The Register: Emergency patch for potential SAP zero-day that could grant full system control
Source URL: https://www.theregister.com/2025/04/25/sap_netweaver_patch/ Source: The Register Title: Emergency patch for potential SAP zero-day that could grant full system control Feedly Summary: German software giant paywalls details, but experts piece together the clues SAP’s latest out-of-band patch is for a perfect 10/10 bug in NetWeaver that experts suspect could have already been exploited as a zero-day.……