ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Apr 16, 2025 · ZeroDay Catalog

    Critical Arbitrary Read and Write Vulnerability in Multiple Apple Products

    Apple has addressed a significant vulnerability affecting multiple products, which could allow attackers to bypass security mechanisms.

    What changed

    Apple has resolved a critical arbitrary read and write vulnerability across several of its platforms. This flaw could allow attackers to bypass Pointer Authentication, potentially leading to unauthorized access to sensitive data.

    The issue has been effectively mitigated by removing the vulnerable code in the latest software updates.

    • Fixed in iOS 18.4.1 and iPadOS 18.4.1
    • Addressed in macOS Sequoia 15.4.1
    • Patched in tvOS 18.4.1 and visionOS 2.4.1

    Who is affected

    This vulnerability impacts a wide range of Apple products, making it critical for users to update their systems promptly.

    The following groups are particularly at risk due to the nature of the vulnerability.

    • Users of iOS and iPadOS devices running versions prior to 18.4.1
    • macOS users on Sequoia versions before 15.4.1
    • Individuals using tvOS and visionOS versions earlier than 18.4.1 and 2.4.1 respectively
    • Targeted individuals who may have been affected by sophisticated attacks exploiting this vulnerability

    What to do

    It is imperative for all users of the affected Apple products to update their systems to the latest versions as soon as possible to mitigate the risk associated with this vulnerability.

    Regularly monitor security advisories from Apple and apply updates promptly to ensure ongoing protection.

    • Update to iOS 18.4.1 or iPadOS 18.4.1 immediately
    • Upgrade to macOS Sequoia 15.4.1
    • Install the latest tvOS 18.4.1 and visionOS 2.4.1 updates
    • Review security settings and practices to enhance overall device security

    Original report

  2. Mar 11, 2025 · ZeroDay Catalog

    Critical Out-of-Bounds Write Vulnerability in Apple WebKit Products

    Apple has addressed a significant out-of-bounds write vulnerability in WebKit that could allow unauthorized actions through malicious web content.

    What changed

    Apple has released updates to address an out-of-bounds write vulnerability in WebKit, which could lead to unauthorized actions if exploited. This issue has been resolved with enhanced checks in several product versions.

    The vulnerability was identified as potentially exploitable in targeted attacks against specific individuals, particularly in versions prior to iOS 17.2.

    • Fixed in Safari 18.3.1, iOS 15.8.4, iPadOS 15.8.4, iOS 16.7.11, iPadOS 16.7.11, iOS 18.3.2, iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, and watchOS 11.4.
    • The fix includes improved checks to prevent unauthorized actions from maliciously crafted web content.

    Who is affected

    This vulnerability impacts a range of Apple products that utilize the WebKit engine, potentially exposing users to significant risks.

    Affected products include:

    • Safari browser across various platforms.
    • iOS devices, including iPhones and iPads running versions before the updates.
    • macOS systems using the affected WebKit version.
    • visionOS and watchOS devices that rely on WebKit functionalities.

    What to do

    Users and administrators are strongly advised to update their devices to the latest versions as soon as possible to mitigate the risk associated with this vulnerability.

    Regularly check for updates and apply them promptly to ensure the security of your devices.

    • Update to the latest version of Safari and iOS/iPadOS/macOS as specified in the release notes.
    • Monitor security advisories from Apple for any further developments regarding this vulnerability.
    • Educate users about the risks of malicious web content and encourage safe browsing practices.

    Original report