Latest Zero-Day news

Mobile Security Firm Wants to Buy Expired Zero-Days

Zimperium, the mobile security company that discovered the Stagefright bug in the summer of 2015, announced yesterday its intention to buy fully-working exploits for former Android and iOS zero-days.
- Catalin Cimpanu
- February 01, 2017
- 06:31 AM
- 0
Unpatched Vulnerability Affecting PHP 7 Servers

PHP 7 is affected by an unpatched vulnerability that opens servers running the latest branch of the PHP programming language to attacks.
- Catalin Cimpanu
- December 30, 2016
- 04:30 AM
- 0
It's Been a Bad Week for Linux as Several Security Flaws Surface

Two security researchers published details this week about several security flaws that allow attackers to execute code on affected machines and take over devices. These security flaws affect Linux distros such as Fedora and Ubuntu, and two of these exploits are zero-days, meaning
- Catalin Cimpanu
- December 17, 2016
- 03:35 PM
- 1
Hundreds of Thousands of Unpatchable IP Cameras Affected by Two Zero-Days

Hundreds of thousands of IP cameras from several vendors are affected by two zero-day vulnerabilities that allow an attacker to hijack the device, use it as a pivot point for other attacks, or spy on the camera's owner.
- Catalin Cimpanu
- December 06, 2016
- 07:30 PM
- 1
Mozilla Hurries to Patch Zero-Day Used to Unmask Tor Users

Mozilla engineers are working on a patch to fix a zero-day exploit that's currently being used to deanonymize Tor Browser users.
- Catalin Cimpanu
- November 30, 2016
- 06:08 AM
- 0
Asian and African Banks Hit with New Zero-Day

Financial and government institutions in Asia and Africa have been the victims of targeted cyber-attacks that have leveraged a zero-day in the InPage Word processor in attempts to install keyloggers and backdoor trojans on targeted computers.
- Catalin Cimpanu
- November 25, 2016
- 10:25 AM
- 0
Chrome Users on Fedora Exposed to Drive-By Download Attacks

A combination of poor design choices and insecure software exposes Chrome users on Fedora desktop to drive-by downloads, security researcher Chris Evans has revealed.
- Catalin Cimpanu
- November 18, 2016
- 10:55 AM
- 0
Microsoft's November 2016 Patch Tuesday fixes Zero Day disclosed by Google

Today is the November 2016 Patch Tuesday and we have 14 security updates being released by Microsoft. Of these 14 updates, 6 of them are rated as Critical as they allow remote code execution on the affected computer. Of particular note is the MS16-135 update, which fixes the zero-day Windows vulnerability reported by Google last week
- Lawrence Abrams
- November 08, 2016
- 04:01 PM
- 0
Zero Day GRUB2 Vulnerability Exposed

A new zero-day vulnerability was discovered for the Grub bootloader that allows attackers to bypass Grub password authentication. A security notice released by researchers Hector Marco & Ismael Ripoll states that Grub versions 1.98 (December, 2009) through 2.02 (December, 2015) are affected by this bug.
- Pranav Jituri
- December 18, 2015
- 03:20 PM
- 0