zero-day exploit
Microsoft patch fails to fix Installer zero-day affecting every version of Windows
Microsoft patch fails to fix Installer zero-day affecting every version of Windows
The exploit allows hackers to elevate privileges and create admin accounts
25 Nov 2021
Hackers used MSHTML exploit a week before patches were ready
Hackers used MSHTML exploit a week before patches were ready
New report finds cyber criminals automating exploit creation to help less capable hackers
14 Oct 2021
Kaspersky exposes MysterySnail zero-day exploit in Windows
Kaspersky exposes MysterySnail zero-day exploit in Windows
Elevation-of-privilege flaw could enable Chinese hackers to mount widespread spying campaign
13 Oct 2021
100 million IoT devices affected by zero-day flaw
100 million IoT devices affected by zero-day flaw
Vulnerability could affect car, fire detection, and patient data sensors
24 Sep 2021
What's behind the explosion in zero-day exploits?
What's behind the explosion in zero-day exploits?
Projections show the industry will detect almost three times as many exploits in 2021 as were found last year
3 Aug 2021
Weekly threat roundup: Windows 11, Cloudflare, Google Chrome
Weekly threat roundup: Windows 11, Cloudflare, Google Chrome
Pulling together the most dangerous and pressing flaws that businesses need to patch
22 Jul 2021
Security researchers uncover more Print Spooler vulnerabilities
Security researchers uncover more Print Spooler vulnerabilities
Microsoft advises customers to disable the component entirely to prevent attacks following the PrintNightmare debacle
19 Jul 2021
Recent Microsoft attacks traced to secretive Israeli spyware firm
Recent Microsoft attacks traced to secretive Israeli spyware firm
Candiru, which trades exclusively with governments, distributed zero-day exploits for vulnerabilities patched this week
16 Jul 2021
Weekly threat roundup: Microsoft Teams, iOS, Samsung Galaxy
Weekly threat roundup: Microsoft Teams, iOS, Samsung Galaxy
Pulling together the most dangerous and pressing flaws that businesses need to patch
17 Jun 2021
Apple patches iOS 12 after hackers exploit WebKit Engine flaws
Apple patches iOS 12 after hackers exploit WebKit Engine flaws
The emergency patch addresses two bugs abused to launch remote code execution attacks
15 Jun 2021
Weekly threat roundup: Windows, Chrome, VMware
Weekly threat roundup: Windows, Chrome, VMware
Pulling together the most dangerous and pressing flaws that businesses need to patch
10 Jun 2021
Windows devices targeted by PuzzleMaker malware exploiting Chrome zero-day flaw
Windows devices targeted by PuzzleMaker malware exploiting Chrome zero-day flaw
Chain of vulnerabilities used to attack multiple companies worldwide
9 Jun 2021
Apple patches exploited iOS and macOS WebKit flaws
Apple patches exploited iOS and macOS WebKit flaws
iPhone, iPad, Apple Watch users may have been subject to arbitrary code execution
4 May 2021
Project Zero trials 30-day ‘patching window’
Project Zero trials 30-day ‘patching window’
The policy change aims to encourage businesses to apply patches while reducing the risk of opportunistic attacks
16 Apr 2021
Weekly threat roundup: Android, Windows, Purple Fox
Weekly threat roundup: Android, Windows, Purple Fox
Pulling together the most dangerous and pressing flaws that businesses need to patch
25 Mar 2021
Microsoft releases one-click patch for Exchange vulnerability
Microsoft releases one-click patch for Exchange vulnerability
The quick fix is aimed at small organisations that do not have dedicated IT teams
16 Mar 2021
Microsoft warns of ransomware attacks as Exchange hack escalates
Microsoft warns of ransomware attacks as Exchange hack escalates
Defender researchers are attempting to block a ransomware strain known as DearCry
12 Mar 2021
Microsoft Exchange servers targeted by 'at least ten hacker groups'
Microsoft Exchange servers targeted by 'at least ten hacker groups'
ESET research found that hackers managed to install backdoors on more than 5,000 servers in over 115 countries
11 Mar 2021
Microsoft patches actively exploited Internet Explorer flaw
Microsoft patches actively exploited Internet Explorer flaw
The latest Patch Tuesday sees the Windows developer patch a fifth actively exploited bug disclosed within a week
10 Mar 2021
Microsoft was warned about Exchange Server flaws two months ago
Microsoft was warned about Exchange Server flaws two months ago
The European Banking Authority is the latest major public body to be compromised by the mass hack
9 Mar 2021
CISA orders agencies to fix Microsoft vulnerabilities abused by Chinese hackers
CISA orders agencies to fix Microsoft vulnerabilities abused by Chinese hackers
Agencies must patch or disconnect the vulnerable software
4 Mar 2021
Weekly threat roundup: Microsoft Exchange, Chrome, Spectre
Weekly threat roundup: Microsoft Exchange, Chrome, Spectre
Pulling together the most dangerous and pressing flaws that businesses need to patch
4 Mar 2021
Microsoft Exchange targeted by China-linked hackers
Microsoft Exchange targeted by China-linked hackers
IT admins have been urged to urgently patch on-premise Exchange Server systems
3 Mar 2021