Page 37 - Zero Day News Today

The real cyber security threats lie in the critical infrastructure sector. Currently the Energy and power sector is facing critical cyber security challenges. Emergency services, water treatment plants, traffic management, and other critical infrastructure rely on operational technology solutions to operate correctly. Operational technology (OT) uses hardware and software to manage industrial equipment and systems in the energy, industrial, manufacturing, oil and gas, robotics, telecommunicatio...

Zimbra has rushed out patches to provide cover for a code execution flaw that has already been exploited to plant malware on target machines.

15 of the 85 vulnerabilities addressed in the October Patch Tuesday are rated Critical in severity, while two are zero-day bugs, one of which is being actively exploited in the wild.

New Delhi, Oct 12 (IANS) Microsoft has disclosed 85 vulnerabilities across its products in its October security update, including one that has been exploited

Patch Tuesday is an informal term used by Microsoft since October 2003, but nowadays it is widely accepted as the right time of the month to release...

Fortinet has publicly announced patches for the recent critical vulnerability and revealed that the zero-day has been exploited in at least one attack.

Microsoft has fixed CVE-2022-41033, a vulnerability in Windows COM+ Event System Service that has been found being exploited in the wild.

Microsoft is investigating reports of a new zero-day bug abused to hack Exchange servers which were later used to launch Lockbit ransomware attacks.

Microsoft has updated the mitigation for the latest Exchange zero-day vulnerabilities tracked as CVE-2022-41040 and CVE-2022-41082, also referred to ProxyNotShell.

A mitigation proposed by Microsoft and others for the Exchange server vulnerabilities tracked as ProxyNotShell can be easily bypassed.