Google Warns: Threat Actors Growing More Sophisticated, Exploiting Zero-Day Vulnerabilities https://gbhackers.com/google-warns-threat-actors-growing-more-sophisticated/ #CyberSecurityNews #Vulnerabilities #cybersecurity #THREATS #ZeroDay #Google

This story about Blue Shield CA reminds me of this report that @mttaggart shared.

Misconfigured junk is WAAAY more of a problem than zero days and the “new hotness” #vulnerabilities.

#vulnerabilitymanagement #zeroday
#infosec
#privacy

https://techcrunch.com/2025/04/23/blue-shield-of-california-shared-the-private-health-data-of-millions-with-google-for-years/

https://infosec.exchange/@mttaggart/114025208861027400

Ethical Zero Day Marketplace Desired Effect Emerges From Stealth https://www.securityweek.com/ethical-zero-day-marketplace-desired-effect-emerges-from-stealth/ #ThreatIntelligence #Vulnerabilities #exploit #ZeroDay

Ethical Zero Day Marketplace Desired Effect Emerges From Stealth https://www.securityweek.com/ethical-zero-day-marketplace-desired-effect-emerges-from-stealth/ #ThreatIntelligence #Vulnerabilities #exploit #ZeroDay

Microsoft has awarded more than $1.6 million in prizes during its first-ever #ZeroDay Quest hacking contest

Security researchers submitted more than 600 vulnerabilities in Microsoft cloud and AI services

The company says the Zero Day Quest event was a success and plans to hold it on an annual basis
https://msrc.microsoft.com/blog/2025/04/zero-day-quest-2025-1.6-million-awarded-for-vulnerability-research/

Cisco has lagged Dell for three zero-day vulnerabilities, pending the related report: https://talosintelligence.com/vulnerability_info @TalosSecurity

Dell security advisories: https://www.dell.com/support/security/en-us #cybersecurity #infosec #Dell #zeroday

Windows NTLM flaw (CVE-2025-24054) is under active exploitation! Learn how this critical vulnerability impacts your security and what you can do to stay safe.

Learn more: https://zerodaily.me/blog/2025-04-18-windows-ntlm-cve-2025-24054-under-active-exploitation

Nearly 24,000 IP addresses were caught scanning Palo Alto GlobalProtect portals in March. Analysts warn this could signal upcoming attacks. Stay alert, stay patched.

https://www.techradar.com/pro/security/palo-alto-networks-gateways-facing-huge-number-of-possible-security-attacks

RedGolf Hackers Linked to Fortinet Zero-Day Exploits and Cyber Attack Tools https://gbhackers.com/redgolf-hackers-linked-to-fortinet-zero-day-exploits/ #CyberSecurityNews #cybersecurity #CyberAttack #ZeroDay #zeroday

#Cellebrite Android Zero-Day not 1 but 3 #ZeroDay by Amnesty International’s Security Lab and Google’s Threat Analysis Group

.. published POC exploit code for Android zero-day exploit chain to unlock the device of a student #activist in the country and attempt to install #spyware

.. all within #Linux kernel USB subsystems leveraged by Android, were marked as “under limited, targeted exploitation” in Google’s February 2025 Android security bulletin
https://securityonline.info/cellebrite-android-zero-day-exploit-poc-released-cve-2024-53104/

Apple dropped emergency security updates! Fixes two zero-day flaws (CVE-2025-31200/31201) already used in 'highly sophisticated' targeted attacks. Update your iPhone, iPad, Mac ASAP!

#SecurityLand #CyberWatch #Apple #Cybersecurity #ZeroDay #iOS #macOS

https://www.security.land/apple-issues-urgent-security-updates-to-fix-zero-days-used-in-targeted-attacks/

Two sides of the same coin

This intelligence report analyzes the similarities between two previously separate APT groups, Team46 and TaxOff, concluding they are likely the same entity. The analysis covers their shared tactics, techniques, and procedures, including similar PowerShell commands, loader functionality, and infrastructure patterns. Key findings include the use of zero-day exploits, complex malware development, and long-term persistence strategies. The report details the groups' use of multi-layered encryption in their loaders, custom obfuscation techniques, and various malware tools like Trinper backdoor and Cobalt Strike. The combined group, now referred to as Team46, demonstrates sophisticated capabilities in targeted attacks against protected infrastructures.

Pulse ID: 6802c8019d40fa74671e9c6c
Pulse Link: https://otx.alienvault.com/pulse/6802c8019d40fa74671e9c6c
Pulse Author: AlienVault
Created: 2025-04-18 21:45:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Attackers strike before patches hit, hijack security tools & stay hidden post-fix. With AI threats & fast ransomware, assume systems *will* fail. Proactive defense & constant vigilance are vital. #CyberSecurity #ThreatIntel #ZeroDay

iOS 18.4.1: Apple patches two critical zero-days — and the U.S. government is taking no chances.

Federal agencies have been ordered to update by May 8 — but this isn’t just about public sector risk.

The vulnerabilities are under active exploitation
All iPhone users are exposed
Delaying could open the door to real-world attacks
Pro tip: enable auto-updates and confirm your device is running 18.4.1

Don’t wait for a mandate to protect your digital life.

#iOSUpdate #iPhoneSecurity #CyberSecurity #ZeroDay #MobileSecurity
https://www.forbes.com/sites/kateoflahertyuk/2025/04/19/new-ios-1841-warning-you-have-18-days-to-update-your-iphone/

Unlocking the Secrets of Zero-Day Vulnerabilities: A Guide to Mastering Vulnerability Research

In a world where cyber threats are evolving at breakneck speed, understanding vulnerability research has never been more critical. Eugene 'Spaceraccoon' Lim's new book offers a detailed roadmap for bo...

https://news.lavx.hu/article/unlocking-the-secrets-of-zero-day-vulnerabilities-a-guide-to-mastering-vulnerability-research

Watching episode 1 of #ZeroDay with Robert Di Nero.

At the 27:56 mark he's walking down a corridor and his legs are very odd. Almost like he's had a stroke. But more importantly, why are his pants so short??!

Windows NTLM flaw (CVE-2025-24054) is under active exploitation! Learn how this critical vulnerability impacts your security and what you can do to stay safe.

#CyberSecurity #InfoSec #ThreatIntel #Vulnerability #WindowsSecurity #CVE #ZeroDay #SecurityNews

Learn more: https://zerodaily.me/blog/2025-04-18-windows-ntlm-cve-2025-24054-under-active-exploitation

Ein bekannter schickte folgende Nachricht:

"Hi,

Live from Belgium, all the public services of the French part of the country (Wallonia) are offline because a very serious intrusion has been discovered yesterday evening.

A friend told me it’s due to an exploited #zeroday #vulnerability in a Ivanti #VPN endpoint."

Es sieht so aus als wenn er recht hat DNS Auflösung und direkte ansprache via IP ist nicht möglich.

Apple just patched CVE-2025-31200 in CoreAudio & CVE-2025-31201 in RPAC, both zero-day flaws exploited in targeted iOS attacks. Update to iOS 18.4.1, iPadOS 18.4.1, & macOS Sequoia 15.4.1 ASAP! More info: https://cyberinsider.com/apple-fixes-two-new-zero-day-flaws-exploited-in-targeted-ios-attacks/ #AppleSecurity #ZeroDay #CyberSecurity #newz