Latest zero-days Total: 420, in 2019: Zero-days 14, candidates: 0

Improper access control in Yuzo Related Posts WordPress plugin

Not patched

Improper access control vulnerability in the plugin allowed attacker to inject malicious JavaScript code and redirect users to phishing websites.

Privilege escalation in Win32k.sys driver in Microsoft Windows
CVE-2019-0859

The vulnerability was reported to Microsoft by Vasily Berdnikov and Boris Larin from Kaspersky Lab.

Privilege escalation in Win32k.sys driver in Microsoft Windows
CVE-2019-0803

The vulnerability was reported to Microsoft by Donghai Zhu of Alibaba Cloud Intelligence Security Team.

Backdoor in Asus Live Update

An APT campaign was launched against ASUS between June and November 2018. The attacker compromised ASA Live Update servers and distributed malware to cca. 1 million computers worldwide. 

The attack was attributed to APT17 adversary, also known as Deputy Dog.

Vulnerability Scanning SaaS

Vulnerability scanning SaaS service is online 3-rd generation vulnerability scanner with scheduled assessments and vulnerability subscription. You can use service to check security of your network perimeter.

About zero-day vulnerabilities

Zero-day vulnerability is an undisclosed vulnerability in software that hackers can exploit to compromise computer programs, gain unauthorized access to sensitive data, penetrate networks, etc. We consider vulnerability a zero-day when there is no solution provided from software vendor and the vulnerability is being actively exploited by malicious actors.

Zero-day candidate is a potential zero-day vulnerability in software which might have been used in targeted attacks, however there is no evidence to support this suggestion.