Security News

South Korean hackers exploited WPS Office zero-day to deploy malware
2024-08-28 22:50

The South Korea-aligned cyberespionage group APT-C-60 has been leveraging a zero-day code execution vulnerability in the Windows version of WPS Office to install the SpyGlace backdoor on East...

Versa Director zero-day exploited to compromise ISPs, MSPs (CVE-2024-39717)
2024-08-27 15:47

Advanced, persistent attackers have exploited a zero-day vulnerability (CVE-2024-39717) in Versa Director to compromise US-based managed service providers with a custom-made web shell dubbed...

Chinese Volt Typhoon hackers exploited Versa zero-day to breach ISPs, MSPs
2024-08-27 14:00

The Chinese state-backed hacking group Volt Typhoon is behind attacks that exploited a zero-day flaw in Versa Director to upload a custom webshell to steal credentials and breach corporate networks. [...]

Google tags a tenth Chrome zero-day as exploited this year
2024-08-26 21:58

Today, Google revealed that it patched the tenth zero-day exploited in the wild in 2024 by attackers or security researchers during hacking contests. [...]

Versa fixes Director zero-day vulnerability exploited in attacks
2024-08-26 16:11

Versa Networks has fixed a zero-day vulnerability exploited in the wild that allows attackers to upload malicious files by exploiting an unrestricted file upload flaw in the Versa Director GUI. [...]

Week in review: PostgreSQL databases under attack, new Chrome zero-day actively exploited
2024-08-25 08:00

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: PostgreSQL databases under attack Poorly protected PostgreSQL databases running on Linux machines...

Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control
2024-08-22 16:13

Details have emerged about a China-nexus threat group's exploitation of a recently disclosed, now-patched security flaw in Cisco switches as a zero-day to seize control of the appliance and evade...

New Chrome zero-day actively exploited, patch quickly! (CVE-2024-7971)
2024-08-22 08:47

A new Chrome zero-day vulnerability (CVE-2024-7971) exploited by attackers in the wild has been fixed by Google. About CVE-2024-7971 CVE-2024-7971 is a high-severity vulnerability caused by a type...

Google fixes ninth Chrome zero-day tagged as exploited this year
2024-08-21 21:43

​​Today, Google released a new Chrome emergency security update to patch a zero-day vulnerability, the ninth one tagged as exploited this year. [...]

Google fixes ninth Chrome zero-day exploited in attacks this year
2024-08-21 21:43

​​Today, Google released a new Chrome emergency security update to patch a zero-day vulnerability, the ninth one exploited in attacks this year. [...]