Security News

Microsoft Patches Two Zero-Day Flaws Under Active Attack
2018-05-09 06:18

It's time to gear up for the latest May 2018 Patch Tuesday. Microsoft has today released security patches for a total of 67 vulnerabilities, including two zero-days that have actively been...

Microsoft Patches Two Windows Zero-Day Vulnerabilities
2018-05-08 19:37

Microsoft has fixed more than 60 vulnerabilities with its May 2018 Patch Tuesday updates, including two Windows zero-day flaws that can be exploited for remote code execution and privilege...

Unofficial Patch Released for Zero-Days Affecting Dasan Routers
2018-05-08 15:39

An unofficial patch has been released for the zero-day vulnerabilities affecting a large number of routers made by South Korea-based Dasan Networks. read more

NSA: The Silence of the Zero Days
2018-05-01 12:33

US Defense Department Defenders Say Attackers Don't Need No Stinking Zero DaysThe head of the NSA's Cybersecurity Threat Operations Center says attackers haven't bothered targeting unclassified...

Mysterious “double kill” IE zero-day allegedly in the wild
2018-04-25 00:28

Chinese security company announces Internet Explorer zero-day exploit that's triggered by Word. So far... that's all she wrote.

Google Discloses Windows Lockdown Policy Zero-Day
2018-04-23 08:18

Google Discloses Unpatched Windows Lockdown Policy Bypass read more

Chinese web giant finds Windows zero-day, stays shtum on specifics
2018-04-23 01:36

Quihoo 360 plays the responsible disclosure game Chinese company Quihoo 360 says it's found a Windows zero-day in the wild, but because it's notified Microsoft, it's not telling anyone else how it works.…

So you’ve got a zero-day - do you sell to black, grey or white markets?
2018-04-15 23:05

Bug bounty sales are getting very complicated, financially andmorally B-SIDESSF Barely a decade ago the mere idea of selling vulnerabilities was highly controversial. Today the market is mature,...

Israeli Security Attacks AMD by Publishing Zero-Day Exploits
2018-03-19 11:27

Last week, the Israeli security company CTS Labs published a series of exploits against AMD chips. The publication came with the flashy website, detailed whitepaper, cool vulnerability names --...

Google drops new Edge zero-day as Microsoft misses 90-day deadline
2018-02-19 18:35

Microsoft wasn't able to come up with a patch within Google's non-negotiable "you have 90 days" period, so the flaw is now public.