Temasec 0-day Archives

Category Archives: 0-day

Apple patches zero-day kernel hole and much more – update now!

May 17 2022 By Paul Ducklin in 0-day, Apple, iOS, Patch, Security, Vulnerability, Zero-day

You'll find fixes for numerous kernel-level code execution holes, including an 0-day vulnerability in many (though not all) versions.

S3 Ep54: Another 0-day, double Apache patch, and Fight The Phish [Podcast]

October 14 2021 By Paul Ducklin in 0-day, Apple, iOS, iPhone, Phishing, Podcast, Security, Vulnerability, Zero-day

Latest episode - listen now!

Chrome zero-day, hot on the heels of Microsoft’s IE zero-day. Patch now!

June 10 2021 By Paul Ducklin in 0-day, Google, Security, Vulnerability, Zero-day

Patch early. Patch often. Patch now!

Another Chrome zero-day exploit – so get that update done!

March 4 2021 By Paul Ducklin in 0-day, Exploit, Google, Patch, Security, Vulnerability, Zero-day

It's déjà vu all over again! New month, new Chrome zero-day bug being exploited in the wild.

Chrome zero-day browser bug found – patch now!

February 5 2021 By Paul Ducklin in 0-day, Exploit, Google, Security, Vulnerability, Zero-day

This zero-day bug affects Chrome, as well as Edge and other Chromium-based browsers.

FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY,FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY

September 12 2017 By Daniel Pany in 0-day, Ben Read, Blog, FLARE, Genwei Jiang, James T. Bennett, Threat Research, Zero-day Vulnerability

FireEye recently detected a malicious Microsoft Office RTF document that leveraged CVE-2017-8759, a SOAP WSDL parser code injection vulnerability. This vulnerability allows a malicious actor...

FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY,FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY

September 12 2017 By Daniel Pany in 0-day, Ben Read, Blog, FLARE, Genwei Jiang, James T. Bennett, Security, Threat Research, Zero-day Vulnerability

FireEye recently detected a malicious Microsoft Office RTF document that leveraged CVE-2017-8759, a SOAP WSDL parser code injection vulnerability. This vulnerability allows a malicious actor...

Second Adobe Flash Zero-Day CVE-2015-5122 from HackingTeam Exploited in Strategic Web Compromise Targeting Japanese Victims

July 19 2015 By Daniel Pany in 0-day, 0day exploits, Blog, FireEye Threat Intelligence, Threat Intelligence, Threat Research

On July 14, FireEye researchers discovered attacks exploiting the Adobe Flash vulnerability CVE-2015-5122, just four days after Adobe released a patch. CVE-2015-5122 was the second Adobe Flash...

Second Adobe Flash Zero-Day CVE-2015-5122 from HackingTeam Exploited in Strategic Web Compromise Targeting Japanese Victims

July 19 2015 By Daniel Pany in 0-day, 0day exploits, Blog, FireEye Threat Intelligence, Security, Threat Intelligence, Threat Research

On July 14, FireEye researchers discovered attacks exploiting the Adobe Flash vulnerability CVE-2015-5122, just four days after Adobe released a patch. CVE-2015-5122 was the second Adobe Flash...

Second Adobe Flash Zero-Day CVE-2015-5122 from HackingTeam Exploited in Strategic Web Compromise Targeting Japanese Victims

July 19 2015 By Daniel Pany in 0-day, 0day exploits, Blog, FireEye Threat Intelligence, Security, Threat Intelligence, Threat Research

On July 14, FireEye researchers discovered attacks exploiting the Adobe Flash vulnerability CVE-2015-5122, just four days after Adobe released a patch. CVE-2015-5122 was the second Adobe Flash...