Tag Archives: 0-Day

High-severity WinRAR 0-day exploited for weeks by 2 groups

BI.ZONE said the Paper Werewolf delivered the exploits in July and August through archives attached to emails impersonating employees of the All-Russian Research Institute. The ultimate goal was to install malware that gave Paper Werewolf access to infected systems. While the discoveries by ESET and BI.ZONE were independent of each other, it’s unknown if the… Read More »

North Korean hackers once again exploit Internet Explorer’s leftover bits

Enlarge / APT37, a group believed to be backed by the North Korean government, has found success exploiting the bits of Internet Explorer still present in various Windows-based apps. Aurich Lawson | Getty Images reader comments 22 with 0 posters participating Share this story Microsoft’s Edge browser has replaced Internet Explorer in almost every regard,… Read More »

Hackers are exploiting 0-days more than ever

Enlarge / VPNfilter had a total of nine modular tools discovered thus far by researchers, potentially turning thousands of routers into a versatile attack platform. reader comments 11 with 11 posters participating Share this story Previously unknown “zero-day” software vulnerabilities are mysterious and intriguing as a concept. But they’re even more noteworthy when hackers are… Read More »

Apple under pressure over iPhone security after NSO spyware claims

NurPhoto | Getty Images reader comments 176 with 102 posters participating Share this story Apple has come under pressure to collaborate with its Silicon Valley rivals to fend off the common threat of surveillance technology after a report alleged that NSO Group’s Pegasus spyware was used to target journalists and human rights activists. Amnesty International,… Read More »