#zero-day-exploits
#zero-day-exploits
[ follow ]
Information security
fromThe Hacker News
1 month agoWeekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More
Critical zero-day vulnerabilities in Apple and Google products and a .NET SOAPwn flaw are actively exploited; install updates and patch affected software immediately.
Information security
fromTechCrunch
1 month agoGoogle and Apple roll out emergency security updates after zero-day attacks | TechCrunch
Apple and Google issued security updates to patch actively exploited zero-day vulnerabilities tied to a likely government-backed hacking campaign targeting specific users.
fromTheregister
1 month agoTwo Android 0-day bugs patched, plus 105 more fixes
The two vulnerabilities are CVE-2025-48633, an information-disclosure flaw in Android's framework component, and CVE-2025-48572, an elevation-of-privilege bug also in the framework component. Both are ranked high severity, and according to Google, both "may be under limited, targeted exploitation." Both of these - plus an additional 105 security holes - all have patches, so it's a good idea to update your Android software ASAP.
Information security
Information security
fromComputerWeekly.com
1 month agoWhat lies in store for the security world in 2026? | Computer Weekly
Budget cuts and reduced cybersecurity staffing have degraded defenses, causing longer dwell times, slower detection, and greater exposure to supply‑chain and zero‑day attacks in 2026.
fromTechCrunch
2 months agoHow an ex-L3 Harris Trenchant boss stole and sold cyber exploits to Russia | TechCrunch
Williams, a 39-year-old Australian citizen who was known inside the company as "Doogie," admitted to prosecutors that he stole and sold eight exploits, or " zero-days," which are security flaws in software that are unknown to its maker and are extremely valuable to hack into a target's devices. Williams said some of those exploits, which he stole from his own company Trenchant, were worth $35 million, but he only received $1.3 million in cryptocurrency from the Russian broker.
Information security
Apple
fromThe Hacker News
9 months agoApple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks
Apple released security updates addressing two actively exploited vulnerabilities in its operating systems.
The updates were prompted by reports from Google TAG and focus on core security flaws in audio processing and RPAC components.
[ Load more ]