Page 12 - Zero Day News Today

Threat actors are exploiting another zero-day flaw in Cisco's IOS XE software to implant a malicious backdoor. The IOS XE operating system run on a wide range of

Hackers have exploited an unpatched zero-day vulnerability in Cisco’s networking software to compromise tens of thousands of devices, researchers have warned. Cisco on Monday issued an advisory warning that a critical-rated vulnerability in IOS XE, the software that powers the company's range of networking devices, was being actively exploited by hackers. Cisco said the bug was found in the IOS XE web administration interface, which can be exploited when an affected device is expos...

Google's Threat Analysis Group (TAG) found Russian and Chinese state-backed hackers exploiting a patched WinRAR vulnerability.

Cisco issued an urgent warning Monday about a critical vulnerability in one of its modular operating system's web interfaces that is designed for routers, switches

What an unfortunate way to start the workweek. On Monday, Cisco released a new advisory about an actively exploited security vulnerability. Tracked as CVE-2023-20198, the bug has...

Rumors have been circulating that the encrypted chat app has a bad vulnerability. There's no evidence to support that, execs say.

Attackers have been actively exploiting vulnerabilities in the HTTP/2 protocol via so-called rapid request attacks, which Amazon Web Services, Cloudflare and Google

Microsoft says a Chinese-backed threat group tracked as Storm-0062 (aka DarkShadow or Oro0lxy) has been exploiting a critical privilege escalation zero-day in the Atlassian Confluence Data Center and Server since September 14, 2023.

Microsoft fixed a way to use WordPad to compromise computers

This week: Bitsight find a whole lot of internet exposed industrial control systems, Apple issued new patches, Sony confirms a data breach, Google and Yahoo tackle