️
#Japan-based #NipponSteel Solutions on Tuesday disclosed a data breach that resulted from the exploitation of a zero-day vulnerability.
#CyberAttacks #DataBreach
#Zeroday https://www.securityweek.com/nippon-steel-subsidiary-blames-data-breach-on-zero-day-attack/
Recherches récentes
Options de recherche
#Zeroday
1 message1 participant0 message aujourd’hui
Google Chrome encaisse sa troisième faille zero-day depuis le début de l’année, et elle est déjà exploitée https://www.clubic.com/actualite-571050-google-chrome-encaisse-sa-troisieme-faille-zero-day-depuis-le-debut-de-l-annee-et-elle-est-deja-exploitee.html #zero-day #cybersécurité #googlechrome #zeroday #web #faille #google_chrome #navigateur
clubic.com · Google Chrome encaisse sa troisième faille zero-day depuis le début de l’année, et elle est déjà exploitéeNouvelle vulnérabilité découverte, nouvelle mise à jour urgente. Google vient de colmater une nouvelle faille sévère dans Chrome, observée en conditions réelles. C’est déjà la troisième faille zero-day activement exploitée depuis le début de l’année.
#China-linked group #Houken hit French organizations using zero-days
https://securityaffairs.com/179602/apt/china-linked-group-houken-hit-french-organizations-using-zero-days.html
#securityaffairs #hacking #zeroday
Security Affairs · China-linked group Houken hit French organizations using zero-daysChina-linked group UNC5174 hit French govt, telecom, media, finance and transport sectors using Ivanti CSA zero-days, says France’s ANSSI.
#Bluetooth was a mistake: Millions of Bluetooth headphones can potentially be turned in eavesdropping devices. Best-seller #Sony and #Bose #headphones are affected by at least some of the disclosed flaws among many others. The true dimension of these flaws is yet unknown as the the vulnerable component is very widely in use under different names.
Disclosure of the vulnerabilities: https://insinuator.net/2025/06/airoha-bluetooth-security-vulnerabilities/
No updates or official statements available yet. 
heise online · Zero-day: Bluetooth gap turns millions of headphones into listening stations
Plus via 
Dr. Christopher Kunz
Gefahr in der Luft: 
Forscher haben eine kritische Sicherheitslücke aufgedeckt, die Millionen drahtlose Kopfhörer in potenzielle Abhörgeräte verwandeln könnte.
Zum Artikel: https://heise.de/-10457857?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
En réponse à heise online
@heiseonline Obwohl diese Überwachungsmaßnahmen nur zielgerichtet eingesetzt werden sollen, schaden sie uns allen – auch in Deutschland und anderen Ländern. Denn damit der Bundestrojaner im Bedarfsfall funktioniert, müssen Sicherheitslücken offengehalten (#zeroday) oder eingeschmuggelt (#backdoor) werden.
Dadurch wird die gesamte globale IT-Infrastruktur unsicherer: Kriminelle und feindliche Geheimdienste können diese Hintertüren genauso nutzen wie die eigenen Geheimdienste.
Wäre schön, wenn Heise diese Zusammenhänge im Artikel erläutern würde.
Gee, I was just thinking that if the Sun decides to go "#ZeroDay" on us, that could put the damper on the AI menace that's been unleashed upon the planet...
The U.S. Ran Its First Space Weather Preparedness Drill—Here’s How It Went
Ironically, the exercise last May was interrupted by a real scenario, when Earth was hit by the strongest solar storm in two decades
Margherita Bassi - Daily Correspondent
May 21, 2025
"According to the NASA statement, the exercise demonstrated 'a critical need' for 'more robust forecasting capabilities of space weather drivers and effects.' The report also emphasizes the need to educate the public, continue developing response plans, make critical infrastructure less vulnerable and collaborate with both the private sector and international agencies."
Two critical Ivanti zero-days (CVE-2025-4427 + CVE-2025-4428) are now being actively exploited after a surge in scanning activity last month. Immediate patching is required. Get more details here 
https://www.greynoise.io/blog/ivanti-epmm-zero-days-reconnaissance-exploitation
#ZeroDay #CyberSecurity #threatintel
G◍M◍◍T 
Pwn2Own Berlin 2025: exploit su AI, Docker, Windows e Linux
https://gomoot.com/pwn2own-berlin-2025-exploit-su-ai-docker-windows-e-linux
Gomoot : tecnologia e lifestyle Scopri le ultime novità in fatto di hardware, tecnologia IA e altro · Pwn2Own Berlin 2025: exploit su AI, Docker, Windows e LinuxPrima giornata di Pwn2Own Berlin 2025: violati sistemi AI, mentre Windows 11, Red Hat e Docker mostrano falle critiche, assegnati premi per 260.000 dollari.
Quote of the day (HD Moore keynote at @NorthSec ) : "no need to run faster than the bear, just run faster than your friend" :-o
Time to go update yo shit again!
Microsoft Urges Immediate Action to Address Five Actively Exploited Windows Zero-Days
Particle News · Microsoft Urges Immediate Action to Address Five Actively Exploited Windows Zero-DaysMay 2025 Patch Tuesday fixes critical vulnerabilities affecting Windows 10, Windows 11, and Windows Server systems, with attackers already exploiting them in the wild.
/
) #Windows #ZeroDay #Bug Exploited for Browser-Led RCE. #Microsoft's May 2025 Patch Tuesday update also contains four other actively exploited zero-day #security #vulnerabilities, two publicly known bugs, and 12 critical patches.
https://www.darkreading.com/vulnerabilities-threats/windows-zero-day-bug-exploited-browser-rce
Well, simply don't use Microsoft products. Use #freesoftware, much less sensible to vulnerabilities, and more respecting your #privacy and your #personaldata
#Linux #Distro are the best
En #China, un #robot #humanoide #H1 ha protagonizado una escena digna de una película de ciencia ficción o de terror al perder el control y, aparentemente, tratar de agredir a las personas que se encontraban a su alrededor.
La Razón · Vídeo: Un robot humanoide de Unitree ataca violentamente a dos trabajadores en China
Well shit... I can't access account balances in TWO different bank accounts. One just spins then says, "Try again later," the other is actually acknowledging they are having "technical difficulties." WHAT IS GOING ON?!!! Is anyone else having these issues?
Attaques #zeroday : derrière les 75 #failles exploitées en 2024, l’ombre du cyberespionnage. Navigateurs, mobiles, Windows, équipements réseau… À chaque année son terrain de chasse préféré pour les attaques zero-day. En 2024, les cyberattaquants ont clairement changé de cible : ce sont les outils critiques des entreprises qui ont encaissé le plus gros des frappes.
https://www.clubic.com/actualite-563748-attaques-zero-day-derriere-les-75-failles-exploitees-en-2024-l-ombre-du-cyberespionnage.html
#sécurité
clubic.com · Attaques zero-day : derrière les 75 failles exploitées en 2024, l’ombre du cyberespionnage
Navigateurs, mobiles, Windows, équipements réseau… À chaque année son terrain de chasse préféré pour les attaques zero-day. En 2024, les cyberattaquants ont clairement changé de cible : ce sont les outils critiques des entreprises qui ont encaissé le plus gros des frappes.
Oligo: Wormable Zero-Click Remote Code Execution (RCE) in AirPlay Protocol Puts Apple & IoT Devices at Risk https://www.oligo.security/blog/airborne #cybersecurity #infosec #zeroday #IoT #Apple @catsalad
Oligo Security · Airborne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk | Oligo Security
Google Threat Intelligence Group (#GTIG) tracked 75 actively exploited zero-day flaws in 2024
https://securityaffairs.com/177180/hacking/google-threat-intelligence-group-gtig-tracked-75-actively-exploited-zero-day-flaws-in-2024.html
#securityaffairs #hacking #zeroday
Security Affairs · Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024Google tracked 75 zero-day flaws exploited in 2024, down from 98 in 2023, according to its Threat Intelligence Group's latest analysis.
Breaking news. Spain, Portugal and parts of France hit by massive power outage
""Such a widespread grid failure is extremely unusual and could be caused by a number of things: there could be a physical fault in the grid which brings down power, a coordinated cyber attack could be behind it, or a dramatic imbalance between demand and supply has tipped the grid system over the edge," Taco Engelaar, managing director at energy infrastructure experts Neara told Euronews."
Huge power cut causes chaos in Spain and Portugal as trains, traffic lights, and payments hit