Tag: zero day exploits
12 articles
Zero-Day Exploits Proliferate as Breakout Times Shrink
Imagine a research preview that can teach itself to find and exploit the very flaws security teams scramble to patch - that's now a harsh reality, as an advanced language model has autonomously discovered and exploited zero-day vulnerabilities in every major operating system and browser. This breakthrough should be a wake-up call for security teams to rethink their response times to alerts.
China-Linked Storm-1175 Weaponizes Zero-Days to Fuel Medusa Ransomware Blitz
Medusa ransomware attacks are happening at alarming speed, thanks to a China-linked threat actor called Storm-1175 that is exploiting a potent mix of zero-day and known vulnerabilities to rapidly infect exposed systems. This high-velocity campaign is a stark reminder of the evolving ransomware threat landscape.
Microsoft Ties Medusa Ransomware Gang to Zero-Day Exploits
Meet Storm-1175, a China-based cybercriminal group linked to the notorious Medusa ransomware gang, who's rapidly exploiting vulnerabilities to wreak havoc. This financially motivated group is marrying fast-moving zero-day exploits with Medusa ransomware, leading to a sharp escalation in attacks.
FBI System Breach Exposes Sensitive Data
A major breach of an FBI system has sent shockwaves through the cybersecurity landscape, leaving organizations and individuals wondering if they're prepared for the worst. This alarming incident is just the latest in a string of high-profile hacks, including a data leak affecting 450,000 Lloyds records and a breach at the Dutch treasury.
Valid Credentials Fuel Majority of Modern Cyber Intrusions
Most modern cyber intrusions aren't about dramatic break-ins, but rather attackers walking through the front door with valid credentials, making them harder to detect. This strategic shift from exotic exploits to ordinary access has led to quieter attacks and longer dwell times, catching defenders off guard.
Microsoft Patch Tuesday Brings Critical Fixes for 77 Vulnerabilities
Microsoft's latest Patch Tuesday update is a wake-up call, addressing a whopping 77 vulnerabilities in Windows and other software - a stark reminder that cybersecurity threats are always lurking. Stay safe by staying up-to-date with the latest security patches.
Chrome updates: Exclusive rapid fixes for safer browsing
Chrome updates just went into overdrive — Google will push security fixes every two weeks across desktop, Android and iOS to shrink the window attackers have to weaponize bugs. Enterprises can still opt into an eight‑week Extended Stable channel for predictable testing and rollouts.
AIs Exploiting Smart Contracts: Exclusive Dangerous Risks
Smart contracts were sold as “trustless” automation — now AI is learning to weaponize their transparency and immutability. Recent research shows models autonomously finding and exploiting on‑chain flaws, forcing defenders to move beyond static audits to runtime protection.
State-Sponsored Cyber Attacks: Exclusive Critical Threat
State-sponsored cyber attacks are escalating — learn how nation-backed hackers target organizations and practical steps you can take to stay one step ahead.
Defense Contractor Guilty in Stunning Costly Zero-Day Sale
What happens when the person entrusted to build the locks quietly sells the keys? An indictment alleges a former Trenchant manager sold zero‑day exploits and offensive cyber tools to a Russian broker for about $1.3 million, potentially turning U.S. capabilities into weapons against American systems and allies.
Threat Actors: Exclusive Surge in Dangerous App Exploits
Exclusive: Threat actors are unleashing a dangerous surge in app exploits—here’s what’s driving the spike and quick, practical steps to keep your apps and users safe.
Patch Tuesday Exclusive: Critical End of 10 Update
Microsofts October Patch Tuesday — which fixed 172 vulnerabilities and patched at least three flaws already being exploited — also sounded the retirement bell for free Windows 10 security updates. If youre still on Windows 10, the clock is ticking: patch, upgrade, or put mitigations in place before attackers reap the payoff.