Zero Day
- News
Google Project Zero Finds “Crazy Bad” Windows Exploit
Google’s bug-hunting team has exposed a serious exploit in Windows 10. A member Project Zero, a group of security analysts that searches for zero-day vulnerabilities, disclosed its existence on Twitter on Monday (8th May). A Google researcher described the security flaw as “crazy bad” and “the worst Windows remote code exec…
Read More » - News
New MS Word Zero-Day Exploit Uses OLE to Bypass Security
Microsoft Word has been the target of malware for almost as long as it’s been around. Usually, it tries to take advantage of the built-in macro function, but not this time. Macro-files aren’t as effective as they used to be as a lot of apps run in sandboxes these days…
Read More » - News
Microsoft Delays Patching Windows Zero-Day Vulnerability
Microsoft’s new update policy for Windows Updates means that all fixes and revisions to the operating system a now delivered in one monthly rollup, rather than incrementally as they are created, on the second Tuesday of each month, which has become known as Patch Tuesday. February’s second Tuesday – 14th…
Read More » - News
Google Reveals Serious Windows 10 Vulnerability
Google’s Threat Analysis Group has revealed that it had discovered a massive zero-day vulnerability – described as “particularly serious – in Microsoft’s Windows 10 operating system, ten days after it informed Microsoft of the issue directly. The vulnerability could potentially affect millions of computers, and Microsoft is yet to patch…
Read More » 
- News
Lenovo ThinkPads Open To Zero-Day Firmware Exploit
When it comes to security, you like to think that your computers are at least the little bit safe from people who might want to cause you harm. We are reminded on a weekly basis that this may not be true as companies are hacked, accounts are sold online and…
Read More » - News
FBI Admits Use of Zero-Day Exploits and Stingrays
In a profile of Amy Hess, the FBI’s executive assistant director for science and technology and overseer of the bureau’s Operational Technology Division, conducted by the Washington Post in the wake of the San Bernardino shootings, the FBI executive openly admitted to the use of a number of techniques the…
Read More » - News
Fully Patched Adobe Flash Hit by New Zero-Day Update
Just as day follows night, and just as UbiSoft thinks up new and amazing game elements to strip away and charge microtransactions for, another zero-day exploit has been discovered for Adobe Flash. But this isn’t any old zero-day exploit, it’s an exploit found in the fully patched version of Flash.…
Read More » - News
Chrome to Block Flash Ads from 1st September
Google has confirmed that from 1st September onwards, its Chrome internet browser will “begin pausing many Flash ads by default”. Though the announcement, made through the AdWord Google+ page, claims that the measure is being taken “to improve performance for users”, but it coincides with a raft of security concerns…
Read More » -
- News
Four New Bugs Have Been Found in Internet Explorer
I know most of you don’t even use Internet Explorer and we all know how it was humiliated throughout the years. However, since the new Microsoft Edge might be using some IE code, it’s worth pointing this out anyway. It looks like security experts have encountered and disclosed four new…
Read More » - News
How a Hacker Made $45,000 Selling 0Day Exploits to Hacking Team
We previously reported that Italian spyware company, Hacking Team, has been hacked and had 400 GB of data publicly released via torrent websites. Well, Arstechnica reportedly found how easy it was doing business with the latter company by digging through their emails. It seems that a Russian hacker approached the…
Read More » - News
Swedish Hacker Finds Serious Security Flaw in OS X Yosemite
The white-hat hacker Emil Kvarmhammer from the Swedish security firm Truesec has found a serious security hole in Apple’s new OS X Yosemite. He dubbed the new vulnerability “rootpipe” and explains that it is a so-called privilege escalation vulnerability. This means that an attacker could get full root access without the need…
Read More »
