#zero-day-vulnerability
#zero-day-vulnerability
[ follow ]
#cybersecurity #ransomware #qualcomm-chipsets #cisa #microsoft-sharepoint #hacking #microsoft #android-security
Information security
fromThe Hacker News
2 weeks agoInterlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
Interlock ransomware exploits critical Cisco Secure Firewall vulnerability CVE-2026-20131 as zero-day since January 26, 2026, enabling unauthenticated remote code execution with root privileges.
Information security
fromTechRepublic
4 weeks agoGoogle's Biggest Android Security Update in Years Fixes 129 Bugs, Including an Actively Exploited Zero-Day
Google released 129 security patches in March 2026, the largest update in eight years, including a critical zero-day vulnerability affecting 234 Qualcomm chipsets that is already under active exploitation.
Information security
fromSecurityWeek
1 month agoAndroid Update Patches Exploited Qualcomm Zero-Day
Google released Android security updates patching nearly 130 vulnerabilities, including an exploited zero-day in Qualcomm chipsets affecting over 200 devices through integer overflow in graphics components.
Information security
fromThe Hacker News
1 month agoAPT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday
Microsoft patched CVE-2026-21513, a high-severity MSHTML Framework vulnerability exploited as a zero-day by Russia-linked APT28, allowing attackers to bypass security features and achieve code execution through malicious files.
fromComputerworld
2 months agoFixes released for a serious Microsoft Office zero-day flaw
"The vulnerability is serious," said Johannes Ullrich, dean of research at the SANS Institute. "The root cause is that Microsoft Office still supports the older OLE document format, which provides access to various OLE components. The effect is similar to what an attacker could do with Office Macros. But Office Macros are typically blocked for documents downloaded from the internet. Microsoft implemented similar protections for OLE components, but this recent exploit found a way to bypass them."
Information security
Information security
fromTechCrunch
3 months agoHundreds of Cisco customers are vulnerable to new Chinese hacking campaign, researchers say | TechCrunch
Chinese government-backed hackers are exploiting a zero-day (CVE-2025-20393) in Cisco Secure Email Gateway and related products, targeting enterprise customers.
fromSecuritymagazine
4 months agoLogitech Confirms Data Breach, Security Leaders Respond
Logitech believes that the unauthorized third party used a zero-day vulnerability in a third-party software platform and copied certain data from the internal IT system. The zero-day vulnerability was patched by Logitech following its release by the software platform vendor. The data likely included limited information about employees and consumers and data relating to customers and suppliers. Logitech does not believe any sensitive personal information, such as national ID numbers or credit card information, was housed in the impacted IT system.
Information security
fromZDNET
4 months agoUpdate Chrome ASAP - attackers are already exploiting this nasty zero-day flaw
Another day, another zero-day, at least for Google Chrome. In an advisory released Monday, Google warned of a dangerous new security vulnerability affecting its popular browser. Fortunately, the latest update squashes the bug. Here are the details. Rated as a high security flaw, the zero day labeled CVE-2025-13223 is described as: "Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
Information security
Information security
fromIT Pro
4 months agoLogitech says zero-day attack saw hackers copy 'certain data' from internal IT systems
Logitech experienced a cyberattack exploiting a zero-day in a third-party platform, resulting in limited exfiltration of employee, customer, and supplier data while operations remain unaffected.
fromTheregister
4 months agoLogitech leaks data after zero-day attack
The continued suppression of a report identifying serious vulnerabilities of the U.S. telecommunications sector undermines the public's understanding of these threats and stymies an important public debate on a path forward,
Information security
fromDataBreaches.Net
5 months agoUS law firm with major political clients hacked in spying spree linked to China - DataBreaches.Net
Suspected Chinese government-backed hackers have breached computer systems of U.S. law firm Williams & Connolly, which has represented some of America's most powerful politicians, as part of a larger spying campaign against multiple law firms, according to a letter the firm sent clients and a source familiar with the hack. The cyber intrusions have hit the email accounts of select attorneys at these law firms, as Beijing continues a broader effort to gather intelligence to support its multi-front competition with the U.S.
Information security
fromTechCrunch
7 months agoSonicWall urges customers to disable SSLVPN amid reports of ransomware attacks | TechCrunch
SonicWall has observed an increase in security incidents affecting its Generation 7 firewalls with VPN enabled, signaling potential exploitation of a new vulnerability.
Information security
[ Load more ]