Latest zero-days Total: 365, in 2017: Zero-days 30, candidates: 8

Backdoor in NetSarang software

2017-08-05

ShadowPad backdoor

A backdoor code was detected in NetSarang software on August 4, 2017. Next day, on August 5 the developer has released an update to resolve the issue. As of August 15, there is an evidence, that the code has being utilized by one instance in Hong Kong.

The malicious code was delivered to the vendor's clients by compromising the software update mechanism. The backdoor was included into updates, issued on July 18, 2017. The update contained ShadowPad backdoor.

Privilege escalation in Linux kernel
CVE-2017-7533

2017-08-03

Backdoor in Web Developer Google Chrome extension

2017-08-02

The browser extension for Google Chrome has been hijacked on Google Web Store.

Backdoor in Copyfish Google Chrome extension

2017-07-30

2017-08-01

The browser extension has been hijacked on Google Web Store.

Vulnerability Scanning SaaS

Vulnerability scanning SaaS service is online 3-rd generation vulnerability scanner with scheduled assessments and vulnerability subscription. You can use service to check security of your network perimeter.

About zero-day vulnerabilities

Zero-day vulnerability is an undisclosed vulnerability in software that hackers can exploit to compromise computer programs, gain unauthorized access to sensitive data, penetrate networks, etc. We consider vulnerability a zero-day when there is no solution provided from software vendor and the vulnerability is being actively exploited by malicious actors.

Zero-day candidate is a potential zero-day vulnerability in software which might have been used in targeted attacks, however there is no evidence to support this suggestion.