Security News

Microsoft obliquely acknowledges Windows 0-day bug published on Twitter
2018-08-29 16:18

Flaw allows a local user to obtain System privileges.

Windows 0-day pops up out of nowhere Twitter
2018-08-28 03:55

Local privilege escalation in procedure calls It's not bad enough to take Microsoft out-of-cycle, but CERT/CC has just put out a warning of a new privilege escalation bug in Windows.…

DEF CON 2018: Apple 0-Day (Re)Opens Door to ‘Synthetic’ Mouse-Click Attack
2018-08-12 17:00

Apple 0-Day allows hackers to mimic mouse-clicks for kernel access, despite mitigations.

Crowdfense platform to allow researchers to safely submit, discuss and sell 0day exploits
2018-08-10 07:44

Crowdfense announced the launch of their Vulnerability Research Platform (VRP). This web-based collaboration platform allows vulnerability researchers to safely submit, discuss and quickly sell...

NSA reveals how it beats 0-days
2018-04-19 13:50

Exploits and vulnerabilities are weaponized against us 24 hours after release, says technical director.

Zerodium Offers $45,000 for Linux 0-Days
2018-02-09 16:40

Hackers willing to find unpatched vulnerabilities in the Linux operating system and report them to exploit acquisition firm Zerodium can earn up to $45,000 for their findings, the company...

15-Year-Old Apple macOS 0-Day Kernel Flaw Disclosed, Allows Root Access
2018-01-02 08:18

A security researcher on New Year's eve made public the details of an unpatched security vulnerability in Apple's macOS operating system that can be exploited to take complete control of a system....

Two Critical 0-Day Remote Exploits for vBulletin Forum Disclosed Publicly
2017-12-18 08:33

Security researchers have discovered and disclosed details of two unpatched critical vulnerabilities in a popular internet forum software—vBulletin—one of which could allow a remote attacker to...

Critical 0-Day Allows Remote Hacking of DirecTV Video Bridge
2017-12-14 17:12

An unpatched critical vulnerability impacting a wireless video bridge used by DirecTV allows for an attacker to remotely execute code on the vulnerable devices, Zero-Day Initiative researchers...

Week in review: Vulnerable encryption, Mac backdoor, Flash Player 0day exploited in the wild
2017-10-23 02:00

Here’s an overview of some of last week’s most interesting news and articles: Vulnerability in code library allows attackers to work out private RSA keys Researchers have discovered a security...