Google Researchers Find New Chrome Zero-Day 2025-06-03 at 12:06 By Ionut Arghire Reported by the Google Threat Analysis Group, the vulnerability might have been exploited by commercial spyware. The post Google Researchers Find New Chrome Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Researchers Find New Chrome Zero-Day Read More »
Vulnerabilities in CISA KEV Are Not Equally Critical: Report 2025-05-28 at 13:13 By Ionut Arghire New report says organizations should always consider environmental context when assessing the impact of vulnerabilities in CISA KEV catalog. The post Vulnerabilities in CISA KEV Are Not Equally Critical: Report appeared first on SecurityWeek. This article is an excerpt from […]
Vulnerabilities in CISA KEV Are Not Equally Critical: Report Read More »
Cityworks Zero-Day Exploited by Chinese Hackers in US Local Government Attacks 2025-05-23 at 12:31 By Ionut Arghire A Chinese threat actor exploited a zero-day vulnerability in Trimble Cityworks to hack local government entities in the US. The post Cityworks Zero-Day Exploited by Chinese Hackers in US Local Government Attacks appeared first on SecurityWeek. This article […]
Cityworks Zero-Day Exploited by Chinese Hackers in US Local Government Attacks Read More »
Russian APT Exploiting Mail Servers Against Government, Defense Organizations 2025-05-16 at 13:15 By Ionut Arghire Russia-linked APT28 has been exploiting mail server vulnerabilities against government and defense entities since September 2023. The post Russian APT Exploiting Mail Servers Against Government, Defense Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Russian APT Exploiting Mail Servers Against Government, Defense Organizations Read More »
Google Ships Android ‘Advanced Protection’ Mode to Thwart Surveillance Spyware 2025-05-14 at 21:18 By Ryan Naraine Google bundles multiple safeguards under a single Android toggle to protect high-risk users from advanced mobile malware implants. The post Google Ships Android ‘Advanced Protection’ Mode to Thwart Surveillance Spyware appeared first on SecurityWeek. This article is an excerpt […]
Google Ships Android ‘Advanced Protection’ Mode to Thwart Surveillance Spyware Read More »
Fortinet Patches Zero-Day Exploited Against FortiVoice Appliances 2025-05-14 at 13:02 By Ionut Arghire Fortinet has patched a dozen vulnerabilities, including a critical flaw exploited in the wild against FortiVoice instances. The post Fortinet Patches Zero-Day Exploited Against FortiVoice Appliances appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Fortinet Patches Zero-Day Exploited Against FortiVoice Appliances Read More »
Ivanti Patches Two EPMM Zero-Days Exploited to Hack Customers 2025-05-14 at 11:01 By Ionut Arghire Ivanti has released patches for two EPMM vulnerabilities that have been chained in the wild for remote code execution. The post Ivanti Patches Two EPMM Zero-Days Exploited to Hack Customers appeared first on SecurityWeek. This article is an excerpt from […]
Ivanti Patches Two EPMM Zero-Days Exploited to Hack Customers Read More »
Zero-Day Attacks Highlight Another Busy Microsoft Patch Tuesday 2025-05-13 at 21:16 By Ryan Naraine Patch Tuesday: Microsoft patches at least 70 security bugs and flagged five zero-days in the “exploitation detected” category. The post Zero-Day Attacks Highlight Another Busy Microsoft Patch Tuesday appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Zero-Day Attacks Highlight Another Busy Microsoft Patch Tuesday Read More »
Output Messenger Zero-Day Exploited by Turkish Hackers for Iraq Spying 2025-05-13 at 14:04 By Ionut Arghire A Turkey-affiliated espionage group has exploited a zero-day vulnerability in Output Messenger since April 2024. The post Output Messenger Zero-Day Exploited by Turkish Hackers for Iraq Spying appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Output Messenger Zero-Day Exploited by Turkish Hackers for Iraq Spying Read More »
SAP Zero-Day Targeted Since January, Many Sectors Impacted 2025-05-09 at 14:01 By Ionut Arghire Hundreds of SAP NetWeaver instances hacked via a zero-day that allows remote code execution, not only arbitrary file uploads, as initially believed. The post SAP Zero-Day Targeted Since January, Many Sectors Impacted appeared first on SecurityWeek. This article is an excerpt […]
SAP Zero-Day Targeted Since January, Many Sectors Impacted Read More »
Possible Zero-Day Patched in SonicWall SMA Appliances 2025-05-08 at 16:11 By Ionut Arghire SonicWall patches three SMA 100 vulnerabilities, including a potential zero-day, that could be chained to execute arbitrary code remotely. The post Possible Zero-Day Patched in SonicWall SMA Appliances appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Possible Zero-Day Patched in SonicWall SMA Appliances Read More »
Second Ransomware Group Caught Exploiting Windows Flaw as Zero-Day 2025-05-07 at 13:02 By Eduard Kovacs At least two ransomware groups exploited the Windows zero-day CVE-2025-29824 before it was patched by Microsoft. The post Second Ransomware Group Caught Exploiting Windows Flaw as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Second Ransomware Group Caught Exploiting Windows Flaw as Zero-Day Read More »
Second Wave of Attacks Hitting SAP NetWeaver After Zero-Day Compromise 2025-05-06 at 15:39 By Ionut Arghire Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability. The post Second Wave of Attacks Hitting SAP NetWeaver After Zero-Day Compromise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Second Wave of Attacks Hitting SAP NetWeaver After Zero-Day Compromise Read More »
Android Update Patches FreeType Vulnerability Exploited as Zero-Day 2025-05-06 at 12:00 By Ionut Arghire Android’s May 2025 security update includes patches for an exploited vulnerability in the FreeType open source rendering engine. The post Android Update Patches FreeType Vulnerability Exploited as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Android Update Patches FreeType Vulnerability Exploited as Zero-Day Read More »
More Details Come to Light on Commvault Vulnerability Exploitation 2025-05-01 at 15:03 By Ionut Arghire Commvault has shared indicators of compromise associated with the exploitation of a vulnerability by state-sponsored hackers. The post More Details Come to Light on Commvault Vulnerability Exploitation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
More Details Come to Light on Commvault Vulnerability Exploitation Read More »
Google Tracked 75 Zero-Days in 2024 2025-04-29 at 14:42 By Eduard Kovacs The number of exploited zero-days seen by Google in 2024 dropped to 75, from 98 observed in the previous year. The post Google Tracked 75 Zero-Days in 2024 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Tracked 75 Zero-Days in 2024 Read More »
Exploited Vulnerability Exposes Over 400 SAP NetWeaver Servers to Attacks 2025-04-29 at 13:34 By Ionut Arghire More than 400 SAP NetWeaver servers are impacted by CVE-2025-31324, an exploited remote code execution vulnerability. The post Exploited Vulnerability Exposes Over 400 SAP NetWeaver Servers to Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Exploited Vulnerability Exposes Over 400 SAP NetWeaver Servers to Attacks Read More »
Craft CMS Zero-Day Exploited to Compromise Hundreds of Websites 2025-04-28 at 17:32 By Ionut Arghire Threat actors have exploited a zero-day vulnerability in Craft CMS to execute PHP code on hundreds of websites. The post Craft CMS Zero-Day Exploited to Compromise Hundreds of Websites appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Craft CMS Zero-Day Exploited to Compromise Hundreds of Websites Read More »
South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days 2025-04-25 at 14:31 By Ionut Arghire Multiple South Korean organizations across industries have been targeted in a recent Lazarus campaign dubbed Operation SyncHole. The post South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days appeared first on SecurityWeek. This article is an […]
South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days Read More »
SAP Zero-Day Possibly Exploited by Initial Access Broker 2025-04-25 at 12:38 By Ionut Arghire A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications. The post SAP Zero-Day Possibly Exploited by Initial Access Broker appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
SAP Zero-Day Possibly Exploited by Initial Access Broker Read More »