Latest zero-days Total: 392, in 2018: Zero-days 17, candidates: 5
Multiple vulnerabilities in Adobe Flash Player
CVE-2018-5002
The vulnerability was reported to Adobe by the following researchers: Chenming Xu and Jason Jones of ICEBRG, Bai Haowen, Zeng Haitao and Huang Chaowen of 360 Threat Intelligence Center of 360 Enterprise Security Group, and Yang Kang, Hu Jiang, Zhang Qing, and Jin Quan of Qihoo 360 Core Security (@360CoreSec), Tencent PC Manager.
The attacks exploiting this vulnerability mainly target the Middle East.
The attacks exploiting this vulnerability mainly target the Middle East.
Remote code execution in Samsung SDS Acube ActiveX Control
The South Korean CERT has reported in the wild exploitation of a remote code execution vulnerability in a popular ActiveX component. The group behind this attack is called Andariel Group. the group is tied to activity of a known North Korean adversary Lazarus Group.
Vulnerability Scanning SaaS
Vulnerability scanning SaaS service is online 3-rd generation vulnerability scanner with scheduled assessments and vulnerability subscription. You can use service to check security of your network perimeter.