0days

TTPs and telemetry suggest a real focus on zero days and appliances by Chinese APTs.

A months-long malware campaign was seen exploiting a zero-day flaw in WinRAR for spear-phishing attacks aimed at traders and finance professionals

CISA has issued a warning over possible attacks on a denial-of-service vulnerability in .NET and Visual Studio, advising administrators to patch ASAP

Ivanti has kicked out an urgent patch for cve-2023-35081, a zero-day flaw in EPMM that is under active exploit in the wild

Apple: "We have never worked with any government to insert a backdoor into any Apple product and never will..."

Customers were first hit in October 2022. End user telemetry flagged something remiss this month... IOCs and Yara rules now shared.

More than half the release involves RCE - time to get patching.

NGINX owner F5 says it is investigating hacktivist group's claims...

The vulnerability, CVE-2022-1096, also affects other Chromium browsers.