7014 matches found
RedTeamLLM: an Agentic AI Framework for Offensive Security
From automated intrusion testing to discovery of zero-day attacks before software launch, agentic AI calls for great promises in security engineering. This strong capability is bound with a similar threat: the security and research community must build up its models before the approach is leverag...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. The vulnerabilities are in the Keymaster trustlet, SmartManagerCN and FreeType, among others. The vulnerabilities allow a local attacker to run code on the device and execute code with SmartManagerCN privileges. Google reports receiving information tha...
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization
Threat actors with links to the Play ransomware family exploited a recently patched security flaw in Microsoft Windows as a zero-day as part of an attack targeting an unnamed organization in the United States. The attack, per the Symantec Threat Hunter Team, part of Broadcom, leveraged...
NSO Group Fined $168M for Targeting 1,400 WhatsApp Users With Pegasus Spyware
A federal jury on Tuesday decided that NSO Group must pay Meta-owned WhatsApp WhatsApp approximately $168 million in monetary damages, more than four months after a federal judge ruled that the Israeli company violated U.S. laws by exploiting WhatsApp servers to deploy Pegasus spyware, targeting...
PT-2025-20281 · Sonicwall · Sonicwall Sma100
Name of the Vulnerable Software and Affected Versions: SonicWall SMA 100 versions 10.2.1.14-75sv and earlier Description: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass path traversal checks and delete an arbitrary file, potentially resultin...
Android fixes 47 vulnerabilities, including one zero-day. Update as soon as you can!
Google has patched 47 vulnerabilities in Android, including one actively exploited zero-day vulnerability in its May 2025 Android Security Bulletin. Zero-days are vulnerabilities that are exploited before vendors have a chance to patch them—often before they even know about them. The May updates...
A week in security (April 27 – May 3)
Last week on Malwarebytes Labs: On world password day, Microsoft says fewer passwords, more passkeys Apple AirPlay SDK devices at risk of takeover—make sure you update The 3 biggest cybersecurity threats to small businesses Zero-day attacks on browsers and smartphones drop, says Google Fake Socia...
On world password day, Microsoft says fewer passwords, more passkeys
And we agree. If there is a cybersecurity themed day that we would like to get rid as soon as possible it’s world password day. Sorry, old friend, but you’re outdated, and it looks like your days are numbered. Let's switch to passkeys. To quote Microsoft: “As the world shifts from passwords to...
Pushing passkeys forward: Microsoft’s latest updates for simpler, safer sign-ins
Happy World Passkey Day! As the world shifts from passwords to passkeys, we’re excited to join the FIDO Alliance in leaving “World Password Day” behind to celebrate the very first “World Passkey Day.” To commemorate this renaming, Microsoft and dozens of other organizations have taken the Passkey...
Pushing passkeys forward: Microsoft’s latest updates for simpler, safer sign-ins
Happy World Passkey Day! As the world shifts from passwords to passkeys, we’re excited to join the FIDO Alliance in leaving “World Password Day” behind to celebrate the very first “World Passkey Day.” To commemorate this renaming, Microsoft and dozens of other organizations have taken the Passkey...
Zero-day attacks on browsers and smartphones drop, says Google
Cybercriminals are having less success targeting end-user technology with zero-day attacks, said Google's security team this week. While most attacks do still target personal technology like smartphones and browsers, the focus is moving increasingly to enterprise tech. Zero-day vulnerabilities ar...
Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach
Enterprise data backup platform Commvault has revealed that an unknown nation-state threat actor breached its Microsoft Azure environment by exploiting CVE-2025-3928 but emphasized there is no evidence of unauthorized data access. "This activity has affected a small number of customers we have in...
CVE-2025-2774
creationtimestamp| type| source ---|---|--- 2025-05-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-282/ 2025-05-04 02:00:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3locqzuaxkk2q 2025-05-04 04:40:43+00:00| seen| https://t.me/CyberBulletin/10744...
Zero-Day Botnet Attack Detection in IoV: a Modular Approach Using Isolation Forests and Particle Swarm Optimization
The Internet of Vehicles IoV is transforming transportation by enhancing connectivity and enabling autonomous driving. However, this increased interconnectivity introduces new security vulnerabilities. Bot malware and cyberattacks pose significant risks to Connected and Autonomous Vehicles CAVs, ...
Google Introduces Agentic AI to Combat Cybersecurity Threats
Google enhances cybersecurity with Agentic AI, launching Unified Security to fight zero-day exploits, enterprise threats, and credential-based attacks.…...
CVE-2025-3887
creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-267/ 2025-05-22 01:43:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17227 2025-05-22 05:05:26+00:00| seen|...
CVE-2025-2759
creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-268/ 2025-05-22 01:42:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17215...
CVE-2024-21113
creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-257/...