0days
TTPs and telemetry suggest a real focus on zero days and appliances by Chinese APTs.
A months-long malware campaign was seen exploiting a zero-day flaw in WinRAR for spear-phishing attacks aimed at traders and finance professionals
CISA has issued a warning over possible attacks on a denial-of-service vulnerability in .NET and Visual Studio, advising administrators to patch ASAP
Ivanti has kicked out an urgent patch for cve-2023-35081, a zero-day flaw in EPMM that is under active exploit in the wild
Apple: "We have never worked with any government to insert a backdoor into any Apple product and never will..."
Customers were first hit in October 2022. End user telemetry flagged something remiss this month... IOCs and Yara rules now shared.
NGINX owner F5 says it is investigating hacktivist group's claims...
The vulnerability, CVE-2022-1096, also affects other Chromium browsers.