Security News

APT Group Uses Windows Zero-Day in Middle East Attacks
2018-11-14 07:14

A Windows zero-day vulnerability addressed this week by Microsoft with its November 2018 Patch Tuesday updates has been exploited by an advanced persistent threat (APT) group in attacks aimed at...

Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
2018-11-13 22:10

Microsoft’s November Patch Tuesday fixes include mitigation against a zero-day vulnerability leaving Windows 7, Server 2008 and Server 2008 R2 open to attack.

Ranting researcher publishes VM-busting zero-day without warning
2018-11-08 13:57

A security researcher has published a zero-day flaw in a commonly-used virtual machine management system without notifying the vendor, justifying it with a scathing critique of the infosecurity industry.

Unpatched VirtualBox Zero-Day Vulnerability and Exploit Released Online
2018-11-08 09:33

An independent exploit developer and vulnerability researcher has publicly disclosed a zero-day vulnerability in VirtualBox—a popular open source virtualization software developed by Oracle—that...

We don' need no stinkin' bounties: VirtualBox guest-to-host escape zero-day lands at GitHub
2018-11-07 11:50

Bug hunter rages at wearisome disclosure process An infosec researcher has expressed his frustration with disclosure processes by going public with a zero-day in VirtualBox, Oracle's open-source...

Researcher Drops Oracle VirtualBox Zero-Day
2018-11-07 10:31

A researcher has disclosed the details of a zero-day vulnerability affecting Oracle’s VirtualBox virtualization software. The flaw appears serious as exploitation can allow a guest-to-host escape....

Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild
2018-11-02 16:50

A high severity zero-day flaw exists in Cisco System's SIP inspection engine.

Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack
2018-11-01 15:20

Called BleedingBit, this vulnerability impacts wireless networks used in a large percentage of enterprise companies.

Cisco Warns of Zero-Day Vulnerability in Security Appliances
2018-11-01 06:20

Cisco informed customers on Wednesday that some of its security appliances are affected by a serious vulnerability that has been actively exploited. read more

Windows ‘Deletebug’ Zero-Day Allows Privilege Escalation, Destruction
2018-10-24 20:04

The unpatched flaw allows an attacker to delete any kind of file on a victim machine, including system data.