Security News

Beware: Apple's Password Manager Has A Zero-Day Flaw
2017-09-29 10:17

Attackers Can Steal Clear-Text Credentials From the Keychain, Researcher WarnsA zero-day vulnerability in Apple's built-in password manager can be exploited, allowing attackers to steal all stored...

Zerodium Offering $1M for Tor Browser Zero Days
2017-09-13 16:54

Exploit acquisition vendor Zerodium said Wednesday it will pay up to $1M for an unknown Tor Browser zero day.

Microsoft Patches Zero-Day, Many Other Flaws
2017-09-13 08:38

Microsoft’s Patch Tuesday updates for September 2017 address roughly 80 vulnerabilities, including a zero-day exploited by threat actors to deliver spyware and several flaws that have been...

Microsoft Patches .NET Zero Day Vulnerability in September Update
2017-09-12 19:59

Microsoft fixes 25 critical vulnerabilities including one zero day under attack and one tied to the high-profile BlueBorne attack vector.

.NET Zero-Day Flaw Exploited to Deliver FinFisher Spyware
2017-09-12 18:34

One of the vulnerabilities patched by Microsoft with this month’s security updates is a zero-day flaw exploited by threat actors to deliver FinFisher malware to Russian-speaking individuals. read more

Researcher Discloses 10 Zero-Day Flaws in D-Link 850L Wireless Routers
2017-09-11 04:29

A security researcher has discovered not one or two but a total of ten critical zero-day vulnerabilities in routers from Taiwan-based networking equipment manufacturer D-Link which leave users...

A Company Offers $500,000 For Secure Messaging Apps Zero-Day Exploits (The Hackers News)
2017-08-24 00:27

How much does your privacy cost? It will soon be sold for half a Million US dollars. A controversial company specialises in acquiring and reselling zero-day exploits is ready to pay up to...

Zerodium Offers $500K for Secure Messaging App Zero Days (Threatpost)
2017-08-23 18:32

Zerodium announced new $500,000 payouts for zero days in secure messaging apps such as Signal, WhatsApp and others.

Foxit to Fix PDF Reader Zero Days by Friday (Threatpost)
2017-08-22 16:33

Foxit Software says it will fix two vulnerabilities in its PDF reader products that could be triggered through its JavaScript API to execute code.

Two Foxit Reader RCE zero-day vulnerabilities disclosed (Help Net Security)
2017-08-18 18:44

Trend Micro’s Zero Day Initiative has released details about two remote code execution zero-day flaws affecting popular freemium PDF tool Foxit Reader. The first one (CVE-2017-10951) is a command...