Security News

WordPress kept users and hackers in the dark while secretly fixing critical zero-day (Help Net Security)
2017-02-02 17:09

Last week WordPress released the newest version (4.7.2) of the popular CMS, ostensibly fixing three security issues affecting versions 4.7.1 and earlier. What the WordPress team didn’t share at...

WordPress: Why we didn't tell you about a big zero-day we fixed last week (ZDNet)
2017-02-02 13:21

WordPress fixed god-mode zero day without disclosing the problem (The Register)
2017-02-02 02:20

Adobe Patches 31 Vulnerabilities, Flash Zero-Day Under Attack (Threatpost)
2016-12-13 18:00

As part of Patch Tuesday Adobe patched a zero-day vulnerability in Flash Player the company claims is being used in targeted attacks against Internet Explorer users on Windows.

Mozilla Patches Firefox Zero Day Used to Unmask Tor Browser Users (Threatpost)
2016-12-01 17:00

Mozilla released a new version of Firefox on Wednesday to address a zero day vulnerability that was actively being exploited to de-anonymize Tor Browser users.

Tor Patched Against Zero Day Under Attack (Threatpost)
2016-11-30 17:44

A zero-day vulnerability in Firefox, similar to one created by the FBI in 2013, is actively being exploited in the Tor Project’s anonymizing TorBrowser.

Firefox Scrambles to Patch Zero Day Actively Exploiting Tor Browser (Threatpost)
2016-11-30 17:44

A zero-day vulnerability in Firefox, similar to one created by the FBI in 2013, is actively being exploited in the Tor Project’s anonymizing TorBrowser.

InPage Zero Day Used in Attacks Against Banks (Threatpost)
2016-11-23 14:00

Banks in Asia and Africa have been targeted with exploits for a zero-day vulnerability in InPage publishing software popular in Arabic-speaking nations.

Pawn Storm raced to pop many targets before Windows zero-day patch release (Help Net Security)
2016-11-09 22:02

As promised, Microsoft provided this Tuesday a patch for the Windows zero-day (CVE-2016-7855) actively exploited by the Strontium (aka Pawn Storm) cyber espionage hacking group. The initial...

Cyberspies Ramped Up Attacks After Exposure of Zero-Days (SecurityWeek)
2016-11-09 19:43