Android warns of Qualcomm exploit in latest security bulletin
The November security bulletin includes two CVE's reportedly exploited in the wild.
Advertisement
zero-days
CISA orders Ivanti devices targeted by Chinese hackers be disconnected
An updated emergency directive includes instructions on how to bring affected devices back online securely.
CISA sees increase in zero-day exploitation, official says
Michael Duffy, associate director for capacity building in CISA’s cybersecurity division, says that global zero-day exploits are “really affecting the federal government networks.”
Google reveals Spanish IT firm’s links to spyware targeting Chrome, Firefox and Microsoft Defender
Google says it has deployed patches for zero-day vulnerabilities that a Spanish tech company may have used to develop spyware.
Zero-day attacks surged in 2021, Mandiant says
2021 accounted for more than 40% of the zero-day exploits undertaken in the last decade, according to the company.
Zero-day exploits found and disclosed hit a record high in 2021, Google Project Zero says
There were 58 total. The good news: Detection and disclosure of zero-day exploits have increased, the research team says.
Advertisement
Hospital hallway robots get patches for potentially serious bugs
Five zero-days found in Aethon TUG robots included one that could allow an attacker to control the machines, Cynerio said.
Project Zero researchers see promising trends in vulnerability fixes
Data from the Google-based team seems to reflect an industry getting faster at fixing bugs and deploying patches.
Likely state-based hackers infected Hong Kong websites to spy on Apple users, Google says
Apple released a patch on Sept. 23.
Google pushes emergency update for Chrome zero-days, the latest in a hectic year for vulnerabilities
That's a dozen so far this year alone, as zero-days are having a record year everywhere.