Tag: Zero-Day
A long username is enough to crack Check Point management servers
Check Point has shipped an emergency fix for a flaw that lets anyone on the network run code as root…
Attackers breach Cisco ISE management interface through an API blind spot
Cisco's identity appliance is being hit through an API endpoint that never checked who was asking.
A logic error in Pixel modems lets attackers climb in silently
A logic error below Android's reach lets attackers escalate on Pixel handsets without any interaction.
Cisco patches a zero-day that turns one email into root
A crafted message can give an unauthenticated attacker root on Cisco's secure email gateway, and the flaw is already being…
Chinese spies pair a Chrome zero-day with a fake Gemini extension
A recently patched Chrome and Windows exploit chain is now delivering two separate espionage toolsets against NGO targets.
Check Point patches two CVSS 9.8 flaws in VPN certificate handling
Check Point has patched two certificate-handling bugs that score 9.8 and could let an unauthenticated attacker run code.
Chaotic Eclipse returns with a bypass for Defender’s ShieldBreak fix
A fresh proof of concept says Microsoft's fix for a Defender escalation bug leaves a gap.
Four spy teams share one BlueMoon kit built on patch-gap bugs
A new exploit kit chained two Chrome flaws and a Windows bug for four espionage crews.